Disabling Internet on Restricted User account

[raventy]

Ok guys, my neighbors have a home network of 5 pcs all running windows xp home except for one which runs windows 98. Now they want to have 2 user accounts on each pc. One being the admin account which has access to the internet and everything, and the other being a restricted account which can run the installed apps but CAN NOT go on the internet. Ive set up the 2 accounts no problem where the one account can run installed apps by the admin account and they cant screw up settings... but, I cant figure out how to disable internet access on the restricted account. Anyone know how? Thanks!

[raventy]

one thought of making this work would be if it is possible to have different Internet Options on each account and mess up the internet options on the one account so it cannot connect to the internet but the other account can since it has a seperate internet options.

[dagamore]

why dont you create a policy that you have to be in group x to access the internet, and only allow the admin user to be in group x.

[raventy]

I dont think I can do that under windows xp home...I thought only Pro could? Where would these policy settings be so I can take a look because I havent seen anything like them so far when messing around in XP Home.

[dagamore]

i think you are right, they only work under pro, i run them at home, but they are pushed from my win2k server, and home cant join a domain, soo it looks like it wont work for you, sorry :(

[redduc900]

The following article may be of some help to you...

Restrict Users from Running Specific Applications (http://www.kellys-korner-xp.com/xp_a.htm#xp_restrict) :)

[raventy]

hehe np dagamore thanks for your help! and redduc900, that link to the information you sent me sounds perfect! Ill restrict internet explorer from running on the user accounts they want and it sounds like it'll work out perfectly for what they need! Ive also removed ways for them to get into my computer and screw around in there and all that fun stuff so once I do this their accounts seem good to go! THANKS!

[fillet54]

Be careful though, they might still be able to use the internet if they type in an address in an explorer window. I dont think windows opens up internet explorer when in explorer rather it just kinda transform into it. I know that i tried to limit internet explorer in win98 it still allowed access through explorer though never tried in XP.

Fil

[raventy]

hehe yea I had the same thought and removed the address bar the explorer menus... though it can be brought back by right-clicking and checking address bar(anyone know of a way to prevent that?) but I dont think my neighbors kids (who will be using the non-internet accounts) would be able to figure it out. So ill just have to wait and see :p

[ssgohan434]

cant u just type a link in like Microsoft Word and then click on it to go to that website (as in a hyperlink)??? Or something similar like that. I know if u were going to do the above mentioned tricks on me it wouldnt work. But these are little kids (8 or under) right?

[raventy]

hehe yea well most of them are under 8, except the one who is like 11. Though with the internet explorer set like it is if they type a hyperlink in word it has to launch the iexplore.exe but since restrictions are in place it cant and will give the message. The only way that they might be able to get online is by right-clicking a folder then checking "address bar" and then type in a web address in the address bar instead of the stuff there like C:, control panel, ect.. tobad the stupid explorer converts itself to internet explorer when u type an address in there which thus by passes the protection. hhmmm if worse comes to worse maybe I could always install something like netscape on the "internet user accounts" and then uninstall internet explorer all together?