windows login lock

[maansingh169]

i have a few different logins on the welcome screen of my computer. now a couple of my kids have log ons, and i dont want them to have access to the internet. is there a way i can block the internet from there account?

[zzyzzx]

Remove the link to IE on their account comes to mind. I'm sure that there are better ways though.

[waheed]

Do not auto-save your password for conneting to the internet. This way, you will need to type a password everytime you need to connect.

[maansingh169]

i have cable internet. there is no password. even if i remove the link, they can still get hit with spyware and other stuff. i know i have the spyware remover and stuff, but i just want it to be like if i removed the cat5 wire. any other suggestions.

[Xylob the Destroyer]

http://sillydog.org/forum/viewtopic.php?t=2677

[maansingh169]

that is ok, but i wanted something like a password. something to with the windows log on screen or something.......anything like that, or a program?

[Prot]

Two different OS's on the system. The OS for their use has no internet set up. Also make sure their logon does not have admin privileges.
By editing the boot.ini file, you can have the OS selection menu make it clear which OS is which.
Prolly not the route you want to take, but it WILL work the way you want.

[jimmalenko]

i have a few different logins on the welcome screen of my computer. now a couple of my kids have log ons, and i dont want them to have access to the internet. is there a way i can block the internet from there account?

I don't know of any hard and fast software (or hardware) solution to your problem, aside from a common-sense approach - supervising their computer use, or getting a "standalone" computer solely for their use.

[maansingh169]

now, i went to BestBuy, and asked one of those guys. now he used his sales pitch and reccommended to purchase Norton Internet Secuirty(about $80) and that allows the controls that i want. i have anti virus with norton already, and spyware protection from spybot, and i am using windows firewall and a hardware firewall with my router. so i am all set, and i dont really want to install Norton security because a friend of mine says that it eats up all of the system resources and slows down everything. i dont want my computer to slow down, it is running moderatly fast (on celeron processer)...so i dont want to kill it...but maybe me mentioning Norton might rings some bells on other software/tricks i can use. i dont want anything too complicated. i am a simple man with a simple plan. i just want to block my kids, and for me to have access. now for the time, being i have been disableing my internet connection from the network connections, but that is getting to be a drag, and eventually the kids will figure it out, i think....but a password would be more convienant. please let me know anyother solutions that are free or less than $20. thanks

[JSB1]

i have a few different logins on the welcome screen of my computer. now a couple of my kids have log ons, and i dont want them to have access to the internet. is there a way i can block the internet from there account?

I am pretty sure you want to edit an Active Directory (AD) Group Policy Object (GPO).... (Click Start, point to Programs, point to Administrative Tools, and then click Active Directory Users and Computers)

How I block specific users access to the Internet using GPO, this mostly applies to terminal services clients on my network, however is used for some internal clients as well.

Create a Organizational Unit (OU) such as "No Internet" or what ever you like, specificaly for the clients. Create a GPO with the same name and link it to the OU.
In the GPO, edit the Proxy Settings under /User Configuration/Windows Settings/Internet Explorer Maintenance/Connection

Set the proxy server IP address and port to a non-existing proxy server. I use the default gateway for my network (IP to my firewall), and then check "Use The Same Proxy Server for all Addresses".

After doing this, move the AD clients to the OU unit you created and have them log off and back on. This will effectively block Internet browsing. I am not sure weather or not it will work for other Browser applications such as Netscape or not, but it does work for IE.

If you find that it does not work for clients that are using Netscape or other browser, you may be to able block the execution of that specific brower executable by editing "Dont Run Specified Windows Applications" Under; /User Configuration/Administrative Templates/System/

Good luck
The HumbleNetAdmin

LINK

A few notes before you dive in:

To use Group Policy, you must have Windows XP Professional or Windows 2000 it's not available in Windows XP Home Edition.
To use Group Policy, you must be logged on using an account that's a member of the Adminstrators group.

Note: I have not tried this...
Good luck,
JSB1

[jimmalenko]

Note: I have not tried this...

Points for effort in searching, but ...



Obviously you haven't tried this ...


... If you had you'd know that Active Directory is only available on the Windows Server versions, and not in XP .....


... and that Group Policy Objects are for when you have a domain set up.

[burnman99]

... and that Group Policy Objects are for when you have a domain set up.

Can't you install GPO's on a stand alone server? I can't remember if you need a domain or Active Directory or not...it's been too long.
I need to reinstall server sometime!

Roger

[jimmalenko]

You might be right - maybe you don't need a domain, but you definitely need a Windows Server Version to get Active Directory.

[burnman99]

You might be right - maybe you don't need a domain, but you definitely need a Windows Server Version to get Active Directory.

Yep! Can't have AD w/out Server.

[JSB1]

Note: I have not tried this...

Points for effort in searching, but ...

Thanks for the points

that is ok, but i wanted something like a password. something to with the windows log on screen or something.......anything like that, or a program?

Ok I have another idea.... THAT I HAVE TRIED! :P

Get yourself a software firewall... I recommend Kerio Personal Firewall 2.1.5 ( HERE ) (FREE for personal use) Do not get from http://www.kerio.com... newer versions are not free.

After you setup Kerio (let it load as a service!) set up a rule(Firewall tab>Advanced) that denys all up/down traffic on any protocol. Make sure to set an admin password under the Authentication tab.

OK this is how it works.... First person to log on from the welcome screen get the icon down in the task bar, the firewall works across all users though. So after you log in for the wecome screen, right click on the blue shield and click Administration. Type in your password. UNCHECK "Enable Firewall" and hit Apply then OK.

You can surf all you want...

When you are done: right click on the blue shield and click Administration. Type in your password. CHECK "Enable Firewall" and hit Apply then OK.

Your machine becomes a black hole to the web... nothing in or out. Untill you UNCHECK "Enable Firewall" again.

IF you wanted only certain apps to work (like Outlook Express, Google Earth) while in "lockdown mode", then create "allow" rules BEFORE the block everything rule.

DOWNSIDES:
1. you will be running a service...task manager shows PERSFW.exe useing 3,108 K of memory and NO CPU.
2. Unless you set up rules, things will not update while in lockdown mode... XP Internet Time, antivirus....
3. During testing I have noticed that web sites that have been access (and "blocked") while in lockdown, do not load very fast (or at all) the first time you try them not in lockdown. Hit Refresh and you good to go.
4. If someone restarts the computer and logs in from the welcome screen, then they will get the icon.... the firewall still works across the whole machine and is still password protected . In order for you to have the icon everyone will have to log off (or be logged off from task manager) then you log in.

Also if someone has admin privileges the the Kerio Personal Service could be stopped/disabled... just tried it, Kerio asks for a password to stop. Could still be disabled then reboot. Just make sure your login is password protected and you kids accounts don't have admin privileges.


OK hopefully I have redeemed myself,

JSB

[gooberguy]

mr.singh,

shad ma sien ne, par je tu apne bachi nu internet ne dien ga, unune gusa baut agu

[p_l]

Use IE Content Advisor, already included free in IE. In IE, choose Tools | Internet Options | Content | Content Advisor | Enable. Set a password, then just about every site on the internet will be blocked by default. You can give them permission for only the ones you want them to visit, once or always. When you log on, enter the password for unrestricted browsing, then enter it again when you finish to restrict access once again. Simple and free.

http://www.microsoft.com/windows/ie/using/howto/security/contentadv/config.mspx

[lumis]

you'd think this would be something simple..

i can understand the guys dilemma..

you cant watch your kids all the time, and you dont trust them.

http://www.netnanny.com ?

[JSB1]

Use IE Content Advisor, already included free in IE. In IE, choose Tools | Internet Options | Content | Content Advisor | Enable. Set a password, then just about every site on the internet will be blocked by default. You can give them permission for only the ones you want them to visit, once or always. When you log on, enter the password for unrestricted browsing, then enter it again when you finish to restrict access once again. Simple and free.

http://www.microsoft.com/windows/ie/using/howto/security/contentadv/config.mspx

So what happens when someone installs Netscape, or god forbid, AOL .

JSB1

[p_l]

Yes, this is a rather simple method for young children, and as they grow older you'll need something more sophisticated. But in order to install Netscape or AOL, they'd presumably have to get it from somewhere, and if you haven't granted permission for those sites, they won't be able to download them in the first place. :P

[smearbrick1]

Why don't you create two separate hardware profiles... one with the NIC disabled, one without?

Then, switch between the two.

[JSB1]

Yes, this is a rather simple method for young children, and as they grow older you'll need something more sophisticated. But in order to install Netscape or AOL, they'd presumably have to get it from somewhere, and if you haven't granted permission for those sites, they won't be able to download them in the first place. :P

OH MY GOD... how many AOL cd's do you get in a year :P

JSB1

[ROF]

if using WinXP, Login under your childs name. Disable the network hardware for that user in your device manager. Logout.

[p_l]

Yes, this is a rather simple method for young children, and as they grow older you'll need something more sophisticated. But in order to install Netscape or AOL, they'd presumably have to get it from somewhere, and if you haven't granted permission for those sites, they won't be able to download them in the first place. :P

OH MY GOD... how many AOL cd's do you get in a year :P

JSB1

Teach your children to fear these and keep far away from them.

Besides, you haven't granted them Administrator or Power User status, have you? As mere Users, they wouldn't be allowed to install anything even if one of these fearful things did make it into your home. :P


Disabling the NIC is a good idea for a stand-alone computer, but a machine on a home network would be cut off from network resources, such as files and printers. Although I can see where this might actually be desirable, e.g. if you don't want junior printing out dad's "special .jpgs" to share with his friends.