Steven
Sat Jul 01 22:21:56 CDT 2006
The best solution is to use a firewall like Microsoft ISA 2004 but my guess
is that is not a possibility in your or most users cases.
What may work is to logon as the limited account and then configure Internet
Explorer to use a bogus proxy server for that user such as 127.0.0.1 and
then enter the websites you do not want to be blocked by the bogus proxy
server in the "do not use proxy server for addresses beginning with". Right
click exceptions and select what's this to get the built in help for that
option. You go to tools\internet options\connections - lan settings to set
up proxy server settings. Note that this will ONLY work for Internet
Explorer but a locked down user account should not be able to install third
party browser and most other internet applications and a software firewall
such as Zone Alarm could help enforce that with application based rules.
If you decide to try the above you certainly will want to make sure that the
user can not access the proxy settings. This can be done with local Group
Policy for XP Pro [gpedit.msc and go to user configuration\administrative
templates\Windows Components\Internet Explorer\internet control panel-
disable the connections page]though such settings by default will apply to
all local users that logon to the computer. Otherwise consider the free
Shared Computer Tookit from Microsoft that can lockdown users with many
Group Policy like restrictions without affecting other users and can also be
used on XP Home. --- Steve
http://www.microsoft.com/windowsxp/sharedaccess/default.mspx --- Shared
Computer Toolkit. Requires SP2
<Asmith333@gmail.com> wrote in message
news:1151807642.424408.72670@75g2000cwc.googlegroups.com...
> I've been reading here alot and decided to post.
> Windows XP SP2, the administrator account want to restrict limited
> account only visiting several dedicated websites, and forbidden the
> limited account visit all the rest websites!
> My ideal is that disable quering DNC server, and mapping the IP
> addresses to host names only which I allow the limited account to
> visit......
> But the drawback is that the limited account user can input the IP
> address directly in browser!
> Maybe there have other methods to accomplish the hard work!
>
> __
> Ash
>