up vote 1 down vote favorite
share [g+] share [fb]

I'm setting up a Windows 7 machine in our warehouse and I don't want the users to have internet access from this machine. They users still need access to the LAN to do their jobs.

Does anyone know how to achieve this? (preferably without any third party software).

link|improve this question
What kind of router does your location have? – Caleb May 3 '11 at 8:06
feedback

3 Answers

up vote 4 down vote

Block the machine in your firewall/router and/or put it on a network with no internet route and/or put it on a separate network that is blocked in your firewall/router.

If your LAN consists of more than one network it will still need a gateway set to reach those.

What level of security do you need and do the users have physical access to the computer's ports while using it?

link|improve this answer
feedback
up vote 0 down vote

To keep this easy just configure a wrong gateway on the computer ip configuration (like 133.133.133.133) it should be enough for a non tech-savy user :)

link|improve this answer
4  
This feels like security by obscurity to me... – Oskar Duveborn May 3 '11 at 9:53
Agreed with Oskar. Security by obscurity is always a bad idea, no matter how computer-illiterate your audience is. It's more important to first identify the available equipment and base a decision on this information. These days even basic routers have MAC blocking capabilities, and this would certainly be better than leaving control in the hands of the end-user. – Richard Keller May 3 '11 at 11:38
I do get the point... The same kind of solution giving the user a non-administrative account is enough to keep him out. Of course fine tuning a router would do a perfect job but it looks a bit harder to do for someone asking the question asked :) – Pitto May 3 '11 at 15:06
As it stated "warehouse" I based my thoughts on this on not being a typical home use-situation in which mac address filtering or gateway fiddling could be fine ^^ Also, physical access to a machine generally equals very easy pwnage regardless of being local admin or not and regardless of actual know-how (yes it can sort of be addressed but it's not an easy task). – Oskar Duveborn May 9 '11 at 13:24
feedback
up vote -3 down vote

just set a static IP on these machines and remove the gateway and/or DNS

link|improve this answer
feedback

Your Answer

 
or
required, but never shown
discard

Not the answer you're looking for? Browse other questions tagged or ask your own question.