Check out some similar questions!

ramsatya · Apr 24, 2008, 11:52 PM

In my organisation there is 8 systems with printer and file sharings in workgroup. All users getting internet through static ips. One user asked me to use internet for himself only not for another user in same system. Is there any solution, help me.
Thank you

Scleros · Apr 25, 2008, 12:48 AM

If you are saying you have two users (different logon accounts) using the same computer at different times and one should have access and one not, then:

Cheap Simple Hack Method:
Logon the restricted account and set a dummy value such as 127.0.0.1 in the Internet Explorer > Tools > Internet Options > Connections Tab > LAN Settings Button > Proxy Server options. Drawbacks are a) only works for web traffic, b) user can change setting, c) browser dependent.

Less Cheap and Simple Method:
Use group policy.

Possibly Real Money and Not Trivial Method:
An account supporting software proxy server like Microsoft ISA or perhaps squid?

Real Money and Complicated Method:
Install a hardware filtering gateway device such as Barracuda Networks or Netsweeper.

If you are saying one computer should have access and another not:

Cheap Simple Hack Method:
Remove default gateway address in network adapter internet protocol properties for the restricted computer.

Less Cheap and Simple Method:
Configure gateway router to block specific outbound traffic from restricted computer.

"Internet" access encompasses a lot of things, hack methods may have undesired effects or impair other functionality.

chuckhole · Apr 25, 2008, 10:25 AM

The solutions that Scleros mentions are good, each depending on how you want it done. Never underestimate the capabilities of your co-workers in finding ways around your solutions.

Here is another option: Find the IEXPLORE.EXE file on the PC and right-click on it and select Properties and then Security.
Change the security on this file to DENY for the specific user you want to deny Internet access to. It is crude but they would not be able to actually run Internet Explorer... hence, no Internet access.

We employ an Active Directory domain structure with Group Policy and also use ISA Server to control Internet access at the user level regardless of what computer they use. However, this does not stop them from begging another user to add their credentials in a browser session and saving them so that Internet access can be obtained without authorization. Because of this, you must also enforce a password change policy.