Hello Andre: I'd recommend buying a router, then installing it in a locked box or closet to which the kids can't gain access. Then use the group policy editor in XP(start>run>gpeditmsc) to allow or deny specific rights. When gpedit is running, go to User Configuration>Administrative Templates>Network>Network Connections and you'll be able to deny net access to any user account Of course it goes without saying that you'll need to set up a user acount for them on the XP machine with limited, not admin privileges. The above assumes XP Professional and still has drawbacks. W2K Server would be better but a bit more complex to set up. And, you still have the problem of going back and resetting policies when you wanted to allow them to use the net under parental supervision. Pretty inconvenient to say the least. Also, that takes care of the XP box but still leaves the Win 98 machine. To make that secure you'll need to pull the NIC card and put a lock on the box. So, here is a much easier way and one I've tested: Buy an SMC Barricade Cable/DSL Router. They are going for about $65 after rebate this week. Build a secure, lockable wooden box for it so that the kids do not have physical access, or locate it in a locked closet. The reason for this is that they seem to be clever enough to figure out how to reset the router to factory defaults. Deny physical acess Once the router is set up you can configure it from a browser--and that includes access control. There is a section in the browser interface that allows setting up three separate groups and blocking traffic for that group to specific ports. In your case, you could make their 98 machine part of group one, then block access to port 80 (internet.) The nice thing is that when you wished to allow them access all you have to do is open the browser, go to the router config (http://192.168.123.254 on the SMC,) enter your password and unblock access. When they are finished you can then block access again in seconds(just make sure they can't see your fingers when you type your password.) Change the password frequently, and make it something they can't easily guess. That's my two cents and it should do the trick for you. You'll also be able to get rid of your software firewall as the router has NAT. Much more convenient than software solutions. Dlink and Linksys also make small 4port cable/dsl routers like the SMC but I am less familiar with them so unsure if they also allow blocking outgoing ports. Good luck and repost if you have further questions.

0

Looks like the gpeditmsc features are exactly what I'm looking for to secure the XP machine. Unfortunately that file does not exist on my machine. It isn't in any directory on my drive (I've even manually browsed through the ../system and ../system32 folders to since it isn't found from the run menu or command line). Maybe I need to use admin settings through mmc.exe. I'm not sure yet because it is 1:00 a.m. and I didn't yet find it in any drop down menus but I will search for it later when I'm more alert. If setting network priviledges is a feature of XP this is exactly what I'm looking for! If so I will install XP to each machine, block network access from their user accounts when I create them and have a bit more peace of mind -- I'll also lock away my installation CDs in the closet with the router so the little bugger doesn't try reinstalling from the boot CD - at this point I have no idea how desperate puberty will make him so better safe than sorry :) If you figure out which other file might be used for controlling group policies please let me know but don't break a sweat trying to locate it, I'll _eventually_ find it since you pointed out that is a feature of XP. Thanks very very much for the help.

0

Hello Andre: Are you running XP Professional? I ask as I do not have a copy of XP Home here at the moment. gpedit is definitely in XP Pro: Start>Run>gpedit.msc Don't forget the "dot" between gpedit and msc. This is MY fault as I just checked my original reply and see I had not included that. Sorry. Also, you mention that you do have a router. What make and model? It's more than possible this can be done more easily from the router interface--especially if you wish to allow them net access at specific times. By the way, you might also be interested in VNC for the times you DO allow them net access. VNC allows remote desktop control but also has a "listening mode" so that the end user never knows their every move is being watched. I set this up for a client who was concerned about what his 13 yr old son was doing on the net while he was at the office--and he was able to see what the son was doing from his office every afternoon from 3 PM until 5 PM. Turns out the kid spent all of his time at the Los Alamos National Lab website looking at Mark Tilden's work. Good Kid. VNC was developed by Bell Labs/ATT and is free at http://www.vnc.com I've been using it since 1995 on networks and it's a terrific product. Have a Happy New Year! dr

0

You can block access by enabling IE's built in "Content Advisor" in the Tools/Internet Options/Content folder in the Explorer menu itself. Just click on the "Tools" menu, select "Internet Options", click the "Content" tab; on the top box labelled "Content Advisor" click the "Enable" button, set a password; next click the "Settings" tab in Content advisor and make sure all content restrictions are set to their lowest possible (as far left as the slider bar goes)level, i.e., highest restrictions. At this setting, almost all sites (and especially porno) are simply blocked by IE itself. I've used this at our house and once enabled, it basically blocks virtually all sites -- all that comes up is a blank screenm. At the lowest possible tolerance settings, even Yahoo and MSN home pages are blocked. To unlock Contnet Advisor when you're home, just disable by typing your password. Netnanny works well, too, but setting it up is cumbersome and it can cause lockups. Hope this helps.

0