westy -> remove internet access. (1/16/2005 16:38:11)
Not sure if this a good place for this question but here goes.
in a small company runing Server 2000 and 200 Pro on desktops. Desktops all run DHCP. So get a Gateway set in their IP, from DHCP. I want to restrict several users to they cant get internet access via the gateway. As far as i can tell i can't have two DHCP groups and assign some users to one and some to the other, which would solve the problem. I could set the firewall to block their current IP address, but as its DHCP it will eventually change one day. Does any one have any Active directory ideas on blocking a user name?
Giomanach -> RE: remove internet access. (1/17/2005 8:22:26)
Westy
You will need to put those machines you want to block all Internet Access to on static IP Addresses, then block those addresses.
DHCP changes the IP address everytime the machine connects to the network, so you wouldn't be able to do so at current.
HTH
Dan
westy -> RE: remove internet access. (1/17/2005 8:45:51)
Hi Thanks for the reply. I understand DHCP, but thought there might be a way to delete the gateway setting. via active directory some where.
But it seems not in win 2000.
I think If i could write a pair of scripts one for log on and one for log off. it would be possible at logon for the netsh command to interpret the DHCP setting and convert them to static ip settings minus the gateway. As the user logged off then It would have to run another script to re-enable DHCP.
shame i am not that good at scripts.
OH well keep looking
Westy
kisys -> RE: remove internet access. (1/28/2005 20:37:38)
Why not just remove the gateway from their connection settings rather than by script if you are not good with scripting?
Giomanach -> RE: remove internet access. (1/29/2005 6:31:12)
Because on DHCP, it automatically adds it every time the machine is switched on/logged on to
It would be possible if you used Static address, but Westy is using Dynamic addresses, and the don't stay the same, but the settings will never change