How to block all network access for one user only

Hi,

 

I want to forbid one user on my PC (eg "guest") from having any network access - IE so they cannot see any other computer on my local network, cannot access the internet in any way, etc. Other users on the PC would continue with their existing access.

 

I have NIS 2011 installed. I've tried the parental controls, but that just seems to report on activity without allowing me to block network access.

 

I know NIS can "Block All Network Traffic", but just want to configure this so it applies automatically whenever one particular user is logged onto the PC.

 

Is this possible?

 

Thanks, Martin

Hi,

 

with the Norton products you unfortunately can not do this.

 

If you use Vista or win7 with the Parental Controls you can stop the access of the Guest account's network access.

I did not find any other options with google to do this on a "home" Windows version...

Shame about Norton, but many thanks. Unfortunately, Parentlal Controls don’t seem to be able to block all network access for one user, so this is also not an option. Thanks anyway. Martin

You can restrict of turn off internet access through the router for a specific machine as long as you have the MAC address for the machine.  Look at your router manual to restrict access. 

Thanks, but that would then block internet access for all users on that machine, wheras I want to block access only for one user, but allow any other users to continue to have access.

 

cheers, Martin

Windows 7 Parent Controls have program
Access. You can decide which programs are and are not used. Just deny access to IE and other browsers as well as instant messengers or what have you. I have a guest account and the only thing allowed is Microsoft games.

Thanks, but again I don’t think this is what I want. For instance I don’t believe it would be possible to allow Windows Media Player to be used locally whilst blocking WMP from being able to access the internet (eg request new CODECs, lookup media details, etc)? Thanks anyway. cheers, Martin

Depending on what version of windows 7 your using, I'm sure it can be done though group policies.

I'm not sure if it's availible in the home versions of windows or just the pro and above versions.

but you can see if you have it by running: gpedit.msc

 

It's used to create rules and restrictions for different user groups and companies use it to keep employees from using the internet and block access to certain programs they don't want them using.

 

Dave

Dave

Bad news. Just tried to run gpedit.msc and my system can't find the file :smileysad:

I'm running home premium

Thats only bad news for you Dick. :)

 

I guess I was right, I wasn't sure about windows 7 but for previous operating systems it was only included in pro and above.

So I guess in windows 7 you need Pro, Enterprise, or Ultimate.

 

But gpedit.msc is really just a front end GUI that makes it real easy to use.  I'm pretty sure you could add the regisitry entries if you know what they are.

 

But the point I was trying to make is that user restrictions and policies is really an operating system function and not really a AV or firewall issue.

 

Dave

100% agreement


DaveH wrote:

Depending on what version of windows 7 your using, I'm sure it can be done though group policies.

I'm not sure if it's availible in the home versions of windows or just the pro and above versions.

but you can see if you have it by running: gpedit.msc

 

It's used to create rules and restrictions for different user groups and companies use it to keep employees from using the internet and block access to certain programs they don't want them using.

 

Dave



This sounds like exactly what I want, and I can run gpedit.msc fine on my machine (Win 7 Ultimate).

 

Found a spreadsheet listing all the Win7 options on microsoft.com, and blimey there are thousands of options in there. But after trawling through the list for a couple of hours it looks to me like "disable networking for this user" or "disable internet access for this user" just isn't one of the available options, darn it.

 

Google suggests I can set proxy to something non-existent, but not convinced whether that would only affect IE?

 

Thanks anyway.

 

cheers, Martin