What is a good way for blocking internet while allowing intranet/local-network/private-ip (over wifi) on Windows Vista/7 computers, for only some user(s)?
It would be best if this can be done using software from Microsoft, especially only using windows. Also, it should be at least extremely difficult (even for someone who knows computer things) to undo or otherwise bypass etc. this from the user accounts which are locked.
If it would be possible to remotely turn on and off the internet for those users from the local network that would be great (from a regular computer, not a server etc.).
Some ideas I had, although can't test currently:
- Whitelist private IP ranges ONLY
- Use group policy if there is a way?
- Use hosts file or proxy? (possible issues: user can change, may be set (in case of hosts file) for all users)
Notes:
- accessing the network infrastructure like switches, etc. is probably not an option here.
