Disable LAN connection for specific user/enable wireless only

[takichiro]

Disable ethernet connection for specific user/enable wireless only

Hi all,

I'm setting up a computer for public access to a local site (repository). There are two accounts:

1.admin account: running a virtual machine as server for the local site. I need access to LAN through wired ethernet in this account
2.public account: the account for the users to navigate the repository. I need to disable the LAN access and just enable internet access through the public wireless interface.

I thought I could just disable ethernet card for the public account on the Group policies, but I didn't find out the way to do it. I've created a group policy for the public account; but under "user configuration -> administrative templates -> network -> network connections" I only see options for enable/disable LAN properties, settings, etc., and not LAN access itself.

---> Is it possible to disbable hardware for specifc users? In that case I could just disable the wired card driver for public user

Thanks in advance!

 

[takichiro]

Ok, I go again (trying to do my best in english!) :

-There are two interfaces in the network:
a- LAN-> access through wired connection. Only for enabled MACs on the router
b- Public access to internet -> through wireless connection. For everyone.

-I cannot use router rules (for instance blocking MAC address, time settings, etc.) as far as I need both connections enabled at the same time, any time: wired for admin account and wireless for standard user account. Both users could use the computer at any time.

-I know I can set up preferred connections, but what I actually want is to prevent any way for the standard user to get connected to the LAN.

-On Group policies I've already disabled access to network settings and IE options for the standard user.

I appreciate any help (and really need it). Thanks!!

 

[JamieTodd]

Sollution?

Hello,

Ever found a solution to this problem?
Currently I am trying to do the same thing but can't find any solution.

Would love to hear how to fix this issue.

 

[samuria]

If you sign in with their profile then in device manager disable the interface should do it

 

[JamieTodd]

That won't work at al.
If you disable the network interface for that user it will be disabled for other users on that machine as well.

I am looking for a way to disable the LAN interface for just 1 user so the only way this user can use internet is trough WiFi.

Other users on this machine should be able to use LAN.

Thanks,

Jamie Todd

 

[jpolacko]

There's no way disable LAN for just one user. If you disable LAN it will effect every user on that machine and/or system wide. If you are using two profiles one acting as a server why don't you just get another computer and turn it into a server and have that computer just for public access. I never heard of disabling LAN for just one user.

 

[JamieTodd]

Yes I was afraid of this.

I was thinking the same thing that it is impossible.
We are using a screen with an on-board computer for presentations.
Our company asked me to find out if it is possible to disable LAN for one user.
They want an account for guests. That's why they don't want them to be able to connect to the LAN.
Other people should be able to use the LAN interface.

Thanks for the reply I will look for another solution.

 

[takichiro]

Jamie,
I've found a solution to achieve that but unfortunately I don't remember exactly how I did it, and I'm not working there anymore.
As far as I remember, I have used Group policies, IE and Firefox settings and pfSense as router.
I'll check some backups out, I should have saved what I did.

I will post again in a few days if I found these backups.