Restricting individual user from internet

[Dngrsone]

I have a standalone machine with several users, some of which I want to restrict access from the internet. I have DSL "always-on" access and free Zone Alarm firewall. Using XP Pro SP2 and all current hotfixes.

I have tried creating a group of authorized users and give them permissions to use the browsers and such, removing the All_Users group, but all it takes is an imported browser to get around that.

I don't have a network server, and thus no domain, so using Group Policy isn't working. I tried gpedit, but it only does all users or local machine settings.

I found a list of policy settings that I downloaded from Microsoft Knowledge Base, and there was a registry entry HKCU\Software\Policies\Microsoft\InternetManagement!RestrictCommunication that was supposed to do teh trick, but applying that setting and all associated did not prevent the user from accessing the net, first by entering an URL in the address bar of Windows Explorer (removed the address bar and patched that hole) then by creating a shortcut to an URL.

Is there an existing policy in the registry overriding this, or am I not applying it in the right key or what? I know I'm not the only person with this problem, but It's going to be a while before I get another computer or two to build a network with and be able to build a proxy server.

Regards,

Dngrsone

[FAT64]

Have a look at this, it might help ...

http://www.microsoft.com/windowsxp/sharedaccess/default.mspx

[Dngrsone]

Have a look at this, it might help ...

http://www.microsoft.com/windowsxp/sharedaccess/default.mspx

<{POST_SNAPBACK}>

Thank you. Unfortunately, the toolkit still requires a third-party application to allow me to control internet access... right now I am looking at Smoothwall to use on a PII to act as a firewall/proxy.

My network is almost assembled, already... just need to punch a hole into a wall and terminate the cables and I will be able to network a few computers.

[FthrJACK]

not sure if this works off a domain but try:

net user dngrsone /time:M-F,08:00-17:00

obviously try it on another acount not your own. Alternatively get a router. either setup smoothwall if you have a spare machine and the time to do it, or buy a hardware router - they cost hardly anything these days.