Tom's Guide | Tom's Hardware | Tom's Games
![]() |
![]() |
![]() |
Hi I Need to stop the user to access the Internet especially Browsing. Other applications are using Internet.. How can i go about that ?
Tech Man

Log into the user account you want to restrict.
Go to "Internet Options" and click on the "Connections" tab. Click on the "LAN Settings" button and put a tick in the box next to "use a proxy server for your LAN". Type into the "Address" box:127.0.0.1
Click "OK" then "OK" again.
This will make the users account you need to restrict unable to access the internet.
You can use a Group Policy setting to remove the "connections" tab in "internet options" to prevent the settings being changed back.Click "Start" > "Run" then type:
gpedit.msc
Click Computer Configuration > Administrative Templates > Windows Components > Internet Explorer > Internet Control Panel > Disable the Connections page, and click Enabled, click Apply then OK.
This is easily reversable.
Test all apps to see if this applies the restrictions the way you want.
Let me know if this works alright for you.

won't that remove all internet access from this pc? What about the "applications are using Internet"?
Imagine the power of knowing how to internet search
http://www.lib.berkeley.edu/Teachin...

That's a good point wanderer,
It would by default be applied to port 80, but upon investigating it on one of the networked home pc's some apps worked but others didn't.
P2P works, but AV updates and firewall were affected by the change... this isn't good.
The links below are worth a look at. They are point by point instructions and easy to follow.

Hi all,
It seems to be impossible, Even with IPSec we have to go by blocking the ports...only. Same kind of filtration can be done with Advanced TCP/IP settings->TCP/IP filters.
The GPEDIT can control its Internet explorer only, if i install third party browser, i can browse, anyway thanx to btk1w1.
But the Best way i believe is in the firewall, after doing that we have to restrict the firewall accessing.Thanx guys.
Tech Man

Another alternative might be to use a software restriction policy in MMC.
You could list the names of all of the executabes for browsers i.e. iexplore.exe or opera.exe etc to prevent an alternative from being installed and used.
I'm sure this would work to restrict the program files from working, and should be good if the user isn't savvy and doesn't change the executable name.
Ref: http://labmice.techtarget.com/artic...
Use software restriction policies
Using a software restriction policy, you can prevent unwanted programs from running; this includes viruses and Trojan horses, or other software that is known to cause conflicts when installed.Software restriction policies can also be used on a standalone computer by configuring the local security policy, or can integrate with Group Policy and Active Directory.
Click Start > Run > type GPEDIT.MSC > Go to Computer Configuration > Windows Settings > Security Settings > Software Restriction Policies
Note: This feature is not available on Windows XP Home Edition
P.S. If I remember right, when a software restriction is placed on the pc an alert messages the user that the software has been restricted by the system administrator.

Hi btk1w1, yes in the path rule we can do that, as we do same in the firewall settings. Until unless they change the name, it works...
Our Every solution has Loopholes.
Thanx man.Tech Man

![]() |
![]() |
![]() |

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.
| Ads by Google |