How to restrict some users from using the internet connetion sharing in windows 2000

How to restrict some users from using the internet connetion sharing in windows 2000 server

As far as I know, ICS is very basic and simply allows you to share the Internet to everyone. To have more advanced settings for invidual users, I think you'll have to try some other software. ISA server will work (but expensive). I like WinRoute Firewall (http://www.kerio.com/kwf_home.html) which allows you to restrict the Internet to different users.

To stop their internet do one of the following on the users PCs you dont want to have internet access through the ICS..



1. Remove DNS server info from the ones you dont want to have access or staticly put bad info in the fields. 2. set IE to use a bogus proxy server. 3. remove their default gateway or put static bad gateway in field.



If they are technicly savy users setup policy on PC so they cant change to correct info.

Although that would work, I think it is computer based, rather than user based. All users using one particular computer would not be able to use the Internet. If everyone has their own computer and only they use it, then this method is ok. Otherwise, if multiple people log on to the same computer, every user would be restricted from the Internet.

for by user filtering without getting any other software the only way I could think of is to remove the users rights from the Internet exporer directory so they cant launch explorer.



This is a real cheesy fix but ICS is a real cheesy internet sharing solution. If you would like to have advanced features I would remove ICS and put a linux box in its place running proxy services or a firewall that uses authentication and policies or any proxy server.