Please click the link below for your operating system to download the TSG SysInfo Utility. Click on "Save File" then double-click the file to run it. Copy and paste the report in your initial post. Windows 7 and later (downloads a file named tsginfo.exe) | Windows XP (downloads a file named SysInfo.exe)

Controlling Internet abuse @ work

1041 Views 4 Replies 5 Participants Last post by mantisimo, Nov 8, 2001

bluemike

Discussion Starter · Nov 1, 2001

We have a small server/client network here (W2000 based). Currently, many of our new hires have been spending an excessive amount of time screwing around on the Internet. I would like to, discreetly, put a stop to it.

All the workstations have their own static IP's, but they all are using accounts from the server. Is there a way I can temporarily disable Internet access to a particular workstation, from the server? I've already atempted disabling account but that doesn't seem to work.

Thanks,

Mike

Save

Status: Not open for further replies.

1 - 5 of 5 Posts

Rockn

· #2 · Nov 5, 2001

Are they connected through a proxy server or a firewall to the internet? If they are you should be able to disable port 80 or set up a rule that would only allow certain IP's out. With a proxy server it's really easy. If your ISP has assigned the IP addresses I am sure they can cut off their access. If all else fails try the content advisor built into IE.

Save

jbcalg

· #3 · Nov 5, 2001

you should also have a written - and well distributed/known - policy about computer, internet, email etc use & abuse
- what is acceptable use and what is not - and what the consequences are
- hopefully senior management knows about the liability the company has for illegal activities etc on company computers
- and that company email is company property - no real expectation of privacy by the sender/recipient

scary concepts and a whole new world of work for the it admin, legal and HR folks

Save

Brooks

· #4 · Nov 6, 2001

The easiest way since you are using static mappings, is to go to your default gateway and tell that device to discard packets from those ip addresses.

You could use cacls in a batch file to give those users no access to the iexplore executable.

echo y| cacls \\(1)\c$\C:\Program Files\Internet Explorer\iexplore.exe /t /e /c /p fred:n
echo y| cacls \\(2)\c$\C:\Program Files\Internet Explorer\iexplore.exe /t /e /c /p fred:n

Save

mantisimo

· #5 · Nov 8, 2001

another possibility is to restrict rights to certain users through W2k profiles.

Save

1 - 5 of 5 Posts

Status: Not open for further replies.

Top Contributors this Month