Hi there, my company has several PCs, using XP, forming a LAN and are able to connect to the Internet through switch and ADSL modem etc.

My boss wants to modify the network such that the guest account on each PC can only access LAN, including local server, but not the Internet. How can I do that? Any clues?

Thanks in advance ;-)

hide2may@yahoo.com.hk

You could change the guest account to proxy to 127.0.0.1 or use a .pac file, but otherwise you really can't do that, at least not without someone being able to just turn things like that off. The best way is something external to the machines, before the ADSL modem - a proxy would be needed, and could be used to only allow access to valid user ids and passwords (regardless of account being used on the machine at the time, guest or otherwise).