Help with Disabling user internet access on home pc

[MrHelpMe]

Hello,

I was wondering if anyone could tell me how to disable internet access for a particular user(s) using Windows XP Professional. I am using a cable modem and it's a non networked environment. It is my home p.c(stand alone) and have found some information on Group Accounts but I'm still not sure how this works. It says to expand the software section of the console root but no software gets displayed. Anybody have any ideas or know of any sofware to disable internet access for user accounts. Also note that I am using opera web browser. Thanks for your help.

 

[bcastner]

Use the ability to create a logon script, and the ability to use regedit to import registry settings to accomplish this.

1. Create the registry scripts needed:

. Internet_on.reg

Open your registry and find the key below.
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings]

Export this key as Internet_on.reg

. Internet_off.reg

Change the value of "ProxyEnable" and set it to "1". Change the value of "ProxyServer" and set it to an IP address and port that is invalid on your network such as "10.0.0.1:5555" (i.e. "IPort&quot.

By changing these settings Internet access will be disabled for any applications that rely of the Microsoft proxy server information such as Internet Explorer, Microsoft Office, Opera browser, Mozilla, etc.

Export the key [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings]

again as Internet_off.reg


2. In the logon script for users you either place the on or off registry key file with the following syntax:

regedit /s Internet_on orp/b] Internet_off.reg

Note: The change will take effect immediately for any new browser windows, existing Internet Explorer sessions will not be affected until the browser is closed and reopened.

3. If you have relatively clever users, they could change these settings, unless you stop them.

To stop users from modifying the proxy settings add these restrictions to disable changes to the Internet configuration.

Find or create the key below:

[HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Control Panel]

Create two DWORD values named "Connection Settings" and "Connwiz Admin Lock" and set them both to "1".

Make certain you create and export a second registry key set where both values are set to 0 or you will not be able to change your connection settings either!

Source: from an idea found in winguides.com

 

[bcastner]

I mistyped a bold sequence above, sorry. The line in part #2 should read for logon scripts:

regedit /s Internet_on or Internet.off.reg

Your choice of which .reg file depending on the user.

 

[bcastner]

This per-user setting can also be applied through a change in the users NTUSER.DAT hive.

If you want to apply this setting to an user, open regedit and import the hive ntuser.dat of another user (ntuser.dat is available in C:\Documents and Settings\<<Username>> folder.

Use Registry editor to load this hive and make necessary modifications.
Remember to unload the hive.

Another simple option is to login as that particular user and apply the registry changes. Restart Windows.