Steven
Sun Jan 11 18:39:15 CST 2004
First you have to make sure that none of these users have or can easily gain
administrative access. Assuming that, you can disable file and print sharing and
Client for Microsoft networks on the computer that only needs internet access, For
further security , you can implement a personal firewall [Sygate or Kerio are good
and free to try] on it or use ipsec filtering which is built into XP Pro and W2K. You
would have to configure the personal firewall or ipsec filtering to block access to
the internal lan network ip addresses and allow everything else which would allow
internet access. For ipsec filtering you would configure a "permit all ip mirrored
rule" and then a block rule for the subnets you wish to deny. --- Steve
http://www.microsoft.com/windows2000/techinfo/planning/security/ipsecsteps.asp
"Martin Stone" <anonymous@discussions.microsoft.com> wrote in message
news:04c201c3d865$70d946d0$a501280a@phx.gbl...
> I have a situation with a client where a 1st floor
> location has 3 pc that were removed from router access
> via mac address exclusion. They need a forth one to
> connect only to the internet. I can setup another PC and
> lock it out of the NT 4.0 network but the problem is
> these employees problably know the password for the
> volunteer users in the upstairs office and that would by
> pass login protection settings to keep them off the
> network.
> I need a PC locked down only accessing the internet so I
> they can go anywhere on the net and not but the network
> in harms way. I was wondering if XP pro OS has any
> features that would lock the system down to only getting
> onto the net and not allow any other password logins.
> Thanks for any help.
> Martin Stone
> TurnKey Computer Solutions