Dear All, I have win2k which is using for NAT. We have 10 users in internal network, all getting IPs from DHCP. Now I have done NAT in win2k server. Now what I want to do is.. to control internet connection for few users. IS there any way..I can allow in NAT based on the MAC address of the computer. I tried so many ways ..but users are smart and trying their best to get connect to internet. I want solution pls...help me... Best Regards, Murali

Not by MAC address, no. However, if you want to control internet access: http://www.microsoft.com/ISAServer/

Why not just tell the users if they get caught on the internet they will get fired? Why can't you make them responsiable for their own actions? If thats not possible then make their log in script restrict them, do a search on this forum, this question has been answered before.

The first guy was right, a proxy server is the way to go, but you could always just impliment a group policy denying access to the internet, or denying access to Internet Explorer period, and if there are other browsers installed, then just deny access to what ever .exe it is from the group policy. If you have a Cisco router, then have a CCNA or Cisco certified someone, to impliment a Access-list denying access on port 80 and just make the users that are permited to the internet, get their mac address, and create a static DHCP address on the DHCP server( so it will always lease that IP address to that machine with that MAC)then give the CCNA the list of addresses that shall not have access to the net.