OT/ Password locking Internet Explorer

[MVS]

We have just entered the 21st century at work and installed broadband, due to necessity not really wanting to. Anyway it is mainly required for e-mail contacts not browsing.

To limit the staff's ability to browse whilst they should be working  I have only allowed 2 of the 5 PC's on the network access to the internet via the router (mine & 1 other), as only these need e-mail access.

I want to allow them browsing access on these 2 PC's, but only if its me  on mine or if they ask & I unlock.

I realise Windoze can have user access accounts set etc etc but we don't use them, & it would get too complicated. Basically I am looking to password protect IE from loading/ running at all. Is it possible, if so how?

I realise IE has a content advisor system but using this is far too involved. I just want an on/off system to block IE loading.

Any thoughts welcomed.

P.S. I have found a couple of little shareware utilities that will do it. has anyone used any of them,  & any recommendations?

Many thanks

Mike

[CedricTheBrave]

you may find that the router has this functionality

allowing certain ports open for certain IP addresses etc

check with the manufacturer of the router/model etc

[John Williams (Panda) - Joint Manchester AO]

install a product on one pc called ccproxy (free for 5 users)

cc proxy

on the other machines specify a proxy server; tools; options; connections; lan connactionand spcify the ipaddress and port.

Config

if you go down this route and need a hand PM me.

I also have the registry to files to lock it down afterwards to stop sticky fingers.

cheers

John

[MVS]

This sounds great guys, but it is a bit deep for me.

The staff are all dental nurses and sometimes struggle turning the network on in the correct order let alone be able 'hack' past a simple password.

I would say I am looking for something simpler as I am no programmer, and am looking for a simple install/setup type solution.

[Bean]

If you tell us which make/model of router it should be easy enough to block internet access to all PC's apart from yours as one other.

You could just block ports 80 and 443 (http and SSL) for select machines, that would prevent you from browsing web pages.

[MVS]

I have blocked access by all machines but mine & 1 other using router. It's password locking those 2 that have access that I am trying to achieve.

The router is a ZyXEL P-660H series if that helps.

Thanks again.

[DerekJ]

You can just set up a simple custom level in the security setting of IE to allow no access to the Internet. Then if you pop onto the PC you can enter a password to unlock the access.  Take a peep on Microsoft site for instructions.

BUT, I must ask why you are being so draconian with Internet access? It sounds like you have a small office and it would soon be noticed that someone is spending too much time on the computer.  Also, if you have Broadband you don't pay for the amount of conection time or data downloaded.

You can win brownie points with the staff by telling them that they can use the Internet during break-times. Just make sure that the PC screens are viewable by everyone and put up a policy that everyone signs to say that if they are caught downloading inappropriate material then they can be sacked. That way you are covered if the porn-police come knocking at the door. It's easier than trying to police access yourself.

Cheers

DJ

[MVS]

You can just set up a simple custom level in the security setting of IE to allow no access to the Internet. Then if you pop onto the PC you can enter a password to unlock the access.  Take a peep on Microsoft site for instructions.

BUT, I must ask why you are being so draconian with Internet access? It sounds like you have a small office and it would soon be noticed that someone is spending too much time on the computer.  Also, if you have Broadband you don't pay for the amount of conection time or data downloaded.

You can win brownie points with the staff by telling them that they can use the Internet during break-times. Just make sure that the PC screens are viewable by everyone and put up a policy that everyone signs to say that if they are caught downloading inappropriate material then they can be sacked. That way you are covered if the porn-police come knocking at the door. It's easier than trying to police access yourself.

Cheers

DJ

Reasoning is simple.

There is only just enough time to complete the daily tasks within the NHS correctly anyway, with the current and new regulations envisiged. I would quite happily set up a PC separate from the rest of our network with no access to confidential database files however we simply have not got the space. It is not a data usage issue.

As to their breaks;  then yes this is the only time they would be allowed to use it. BUT what we do not want is pc's left mid conversation on face book, downloading ringtones & god knows what onto a network with confidential information on it. etc etc when they should be dealing with sterilizing,  or managing confidential patient information correctly.

They are women, and it would just be one too many distractions. Lets face it there are enough stories of data losses in public service. I am merely trying to prevent a potential problem by limiting factors.