On Fri, Mar 28, 2008 at 12:18:41PM +0000, Peter Alcibiades wrote:
What is the simplest way to prevent one of the accounts on one of PCs on the lan from accessing the net? It does not have to be super secure, just require a modicum of knowledge to bypass, which the users will not have. Famous last words.
The account should have access to the LAN however for network printers. If its more convenient, it would also be OK to block all accounts.
Is this something best done through groups?
Assuming you have a router of some sort between the LAN and the internet this sounds to me like it should be done in the router's firewall setup. Certainly both of my routers would allow this to be done very easily using the Web configuration utilities.