Protect/isolate boxes on home network

[Apollo13a]

Hello, I am helping a friend add a 3rd computer to his home network. This computer is for his 14 yr. old son. It seems that his son likes to shut off virus protection on his computer and search the internet(not my issue ). My question is, Is there a way to protect the other 2 boxes on the same network from being infected if the 3rd box picks up a virus? Each machine has local anti-virus software. Since windows boxes like to communicate with each other automatically, could I add a second router and create a different subnet to isolate the 3rd box or maybe use some admin settings for protection?
thanks, Jim G.

 

[linney]

After a bout of malware and no computer access it shouldn't be too long before the 14 year old comes around to your way of thinking.

The virus protection of the other two machines should also protect from catching anything from the third machine.

See if there is anything here.

How to Share and Set Permissions for Folders and Files Using Windows XP

http://www.microsoft.com/technet/prodtechnol/winxppro/maintain/filesharing.mspx

Description of a Personal Firewall

http://support.microsoft.com/kb/321050

Chapter 8: Configuring User and Computer Policies continued

http://www.microsoft.com/mspress/books/sampchap/5205d.aspx

http://groups.google.com/groups/sea...access+to+one+machine+OR+computer&qt_s=Search

 

[Apollo13a]

Well, I was thinking. The only way to join the network is to use the network wizard, right? My friend's son could connect to the router but not technically be on his network. That should isolate him and protect virus and trojans and al that stuff from spreading. Am I thinking clearly about this, what do you think? So he's connected to the router but not on the network.

 

[linney]

Whatever the Network Wizard does can also be done manually where connecting to any LAN is concerned. I have never used the Network Wizard when joining computers to my small home LAN.

 

[audiopro]

his son likes to shut off virus protection on his computer and search the internet

His actions are making him too vulnerable without him gaining any benefits. Had a similar situation at an office I worked at where one of the bosses decided to turn off all protection and got more viruses and spyware products than you could shake a stick at. The annoying thing from a sysadmin point of view was that his box continued to work with no problems at all. We taught him a lesson by backing up his entire computer to the server and wiping all of his files. He took notice ofus when his computer would not boot but not before.

It is too much of a risk to allow any potential virus get through. Don't risk it, take charge of the situation before the other machines are compromised.

Keith

http://www.studiosoft.co.uk

 

[AndrewTait]

As many AV programs require admin rights to alter their set up, it would not be too difficult to chenge the settings on his machine in order to stop him switching off the AV software.

Unless it is some of the more bloatware av products (Did I really say Norton?) then there should not be too much of a hit on performance. I personally have recommended and used both AVAST and AVG Free for this purpose, and both are free for single machine non-commercial use.

=======================================
So often times it happens that we live our lives in chains
And we never even know we have the key

Ne auderis delere orbem rigidum meum
======================================

 

[firewolfrl]

I would use a 2nd good quality router for multiple reasons
• Hardware firewall in-place…no way for virus transfer
• You can turn the internet off automatically at bedtime
• You can block IP addresses such as MySpace and chat
• You can block file sharing….I would hate to be the parent served with a Subpoena for your kid illegally downloading movies and music
• You can protect your data and block the nastiness that the teen is going to get when he disables antivirus software
• The parents computer will not have the limitations the teens computer has

I am a firm believer that no kid should have unlimited unsupervised access the internet.
(My 18 year old daughter would argue this point. But, she does not pay for the internet and lives under my roof with my rules)
You can also get a program called Child Control 2006

http://www.salfeld.com/software/childcontrol/index.html

I use this software and love it as a parent of teens
My son is a game nut and would turn on the computer in the middle of the night to play.(school nights too)
I set the program to be shut down at night so all he can do now is turn the computer on and once the computer is booted up the program shuts the computer off

The side benefit from this is you can block the teen from doing anything to the program and limit him from disabling the antivirus


For the most part my teens (I have 3) do not complain because when the software is running they don’t even notice it is there. Except maybe at bedtime on a school night

LOL

That is my rant and rave