Password protect browser/internet

[Burdman27911]

Hey guys,

I did a quick search and couldn't find anything related, so I decided you guys would probably know how to set it up. What I'm trying to do is set up a password for logging into the internet so you would be able to access all the files on the network, but nothing from the internet without the password. It doesn't matter if it needs to be setup for each PC or something for the whole network. I just can't find out how to do this through either windows xp pro options or IE/Mozilla... maybe I'm just crazy. I imagine that it's easier than I'm making it out to be.

Thanks in advance, and for those in the USA, happy early Thanksgiving!

 

[ErikD]

Knowing why you want to do this, hat you wish to accomplish, what type of network, etc. might help out. Like are you just intereested in blcoking your kids from spedning to much time online? Is this an enterprise network and you want to just no allow internet access except to authorized people? What kind of hardware/budget can you use to make it work?

 

[FeuerFrei]

A bit more info would greatly help...

 

[Burdman27911]

Ah yes, sorry. I didn't quite explain it all well enough at first. This is for a small extension of a church. I've helped them get all the electronics set up, and they need to have internet access, but only for authorized people. So in a sense, it's much like the enterprise type network that is set up at my work.

They have three (possibly 4) computers on this network, one is for video editing, one for the main room with projection, and one or two offices. They are connected to the internet via DSL all through the same router.

The cheaper this will be the better, as the nice core 2 duo system and a professional video camera set them back enough as is. Also a software solution would be best if at all possible.

Let me know if you need anymore info. And thanks for the replies... I am a bit of a networking newb.

 

[Audioaficionado]

A firewall would do the trick. Only preauthorize users would be allowed outside the LAN. I don't know how to set it up but a place I once worked for did this.

 

[jivetrky]

Would there be more than those authorized users using these computers for non-internet?

If not, then just set a password (or seperate accounts for each person with passwords) in Windows XP logins.

 

[Burdman27911]

Thanks for the replies. Yes, there are possibly several people who will be using this PCs but should not have access to the internet.

I've installed (i.e. hooked up) firewalls, but never actually set them up with ports and passwords. Any guidance there would be much appreciated.

 

[El<(')>Maxi]

Is there a domain controller on this network? Jiveturky has the right idea, create accounts for each person and then via group policy grant access as needed.

 

[jivetrky]

Well even if there isn't a domain server, I was just thinking setting up passworded accounts on WinXP, so they have to login. Then only the people you want will have access to the computer. Then just set the screensaver to 1 minute with welcome screen resume, so that way it goes back to a password lock. Simple enough.

 

[Burdman27911]

No there isn't a domain controller as of now. Each computer is connected straight to the internet through the router. Is there any way to block the internet from users without setting up another computer as a DC? It would even be fine if you could only access the internet on certain user accounts and the lower level accounts cannot (but it is still preferred to have a specific login for the internet).

 

[Prot]

Buy and install Trend Micro Internet Security. It has an easy interface to restrict acceess by password.

 

[Burdman27911]

I'll look into it, thanks!

 

[jivetrky]

Buy and install Trend Micro Internet Security. It has an easy interface to restrict acceess by password.

I use that program for my AV/FW, where is the option to restrict access to internet by password?


(I was thinking BTW, that setting up a proxy server would probably work, as you could set it up to require username and password, I think. I've never used one, but I believe that is how they work or can work.)

 

[Prot]

I have attached a screen shot of where you can do this.

 

[Burdman27911]

The thing is, I have very little experience with networking and the such aside from just getting things set up and running... I really have no idea how to set up a proxy sever (or a DC sever). I'm sure I could learn, and I'd love to, but I at least need somewhere to start .

Thanks again for the help guys. I'll keep checking into the options and maybe I'll find a cheap solution.

 

[Burdman27911]

I have attached a screen shot of where you can do this.

Am I missing something in that screen? That acutally looks like it will only block specific websites. I'm looking for something to block all access to the internet without a username and password (can't see that option in the pic).

 

[Prot]

When you click on the options, it lets you permit access to only certain websites or select it to not allow it all. It lets you set up approved sites, blocked sites or filter certain types of sites. There are also different firewall profiles you can select. It's pretty simple.

 

[Burdman27911]

Ok, sounds good. The description on screen didn't include the part I was looking for. Thanks Prot, I'll look into buying it.

 

[Prot]

Forgot to mention it's forty to fifty bucks and comes with three licenses as well as wireless networking security and spyware stuff. Be sure to get the one that says internet security. There are some other similar looking boxes that are just antivirus or just spyware stuff. The internet security one is everything you need in one package. It's also very light on system resources unlike norton and mcafee these days. No I do not work for them lol.

 

[jivetrky]

Well I only have IS 2006, but when I turn on web filtering, it only allows me to allow or block access to websites. If it blocks access, then the only way to get back into it, is to open IS2006 and either add that site to the access list or turn off filtering.

If 2007 works differently and allows to you type in the password to continue to the site, my guess is that you'd have to type in the password for every site you access. Right?

I don't think this is the solution for which Burdman would be looking.