Disable Internet

[apex1x]

This sounds like it could be solved very simply but I'm unsure on the best approach. I want to disable internet access for certain users on the network. I cannot do this through the router/modem we are using so I think it must be done client side.
Every workstation gets their settings from a DHCP server and each workstation uses TCP/IP and internet explorer for internal web sites. However, I just want external internet disabled. What is the best way to do this? If you can understand it, you probably don't.

 

[Ntr0P]

Create a reservation in DHCP for the users you do not want to have access to the Internet. Remove their default gateway. They will only have access to the local subnet.

 

[apex1x]

NtrOP, what do you mean by "create a reservation"?
These are mainly Win98 machines. Which setting/action are you referring to? If you can understand it, you probably don't.

 

[Ntr0P]

A reservation is something that is configured on the DHCP server. If DHCP is on an NT4 machine, open DHCP Manager, highlight the scope, Click Scope from the menu and select "Add reservations...". You will need to know the mac address of each machine to do this.

An easy way to determine the mac address of a machine you wish to create a reservation for is to ping that machine and then type arp -a for a listing of your arp table. You will see the IP address and the associated mac address there.

Once you add the reservation, click on the Options button for that reservation and you can configure the Options specific to that reservation. Do not enter a Default Gateway.

 

[apex1x]

Ok, then I should mention I'm using a cicso router, acting as a DHCP server. There are not many settings I can do there-definatly not reservations.
Any other suggestions? If you can understand it, you probably don't.

 

[Ntr0P]

Having not set up a Cisco router to do DHCP before, I'm not sure if it performs some kind of conflict detection. In either case, you can place the PC's that should not have Internet access outside the scope of the DHCP server and hard code the IP addresses/DNS/WINS and leave out the default gateway. I assume there are not a lot of PC's to be done.