Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I am running Microsoft Small Business Server 2003 with Exchange. I would like to block internet access for two Windows XP client computers on the network. Can somebody talk me through this?

share|improve this question
up vote 2 down vote accepted

Are you running the Proxy Server component as part of your SBS installation? If not, you will probably not really be able to prevent it using SBS specifically.

It really needs to be done at whatever device or program you are using as a firewall, and forbid that traffic from getting out. I would set them up in a specific IP range, make that a group, and forbid the group from sending whatever type of IP traffic (port 80 at least) from going out. The rule would need to be above any rule allowing the traffic out. Then you would still need to lock them down by making sure they are not in the administrators or power users groups, so they can't change their IP address.

If that is not in the cards, you can still throw roadblocks that many users could not get around: Give them a static IP and don't put in a default gateway, or add a non-existent proxy server to their browser settings.

share|improve this answer
hopefully they're not local administrators. – gravyface May 23 '11 at 14:22

There's a fairly simple way to do this via group policy. Create a new OU for these computers and drop them in it. Apply a group policy to this OU that:

  1. Enables loopback group policy processing
  2. Sets the proxy server in IE connection settings to
  3. Prohibits the user from changing IE proxy settings
share|improve this answer
Sorry, what is an OU? – Alexander 'Bambi' Sadler May 24 '11 at 8:05

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.