ChristianBlog.Com About Membership Signin Join Today
Don't be afraid, you are of more worth than many sparrows
Les B+ published this sponsored blog
My very first blog!
K Reynolds+ published this sponsored blog

Disable Internet Access in Windows For Specific User Accounts

This How-To will allow you to disable the internet from being accessed on selected user accounts within Windows XP and Windows Vista and Windows 7.

There are often times useful to parents and network administrators who need or want to lock down their computer(s). For instance, a parent might want to allow a child to access the computer itself, but not access the internet. Or a system administrator might need to lock down a specific computer or an entire cluster of computers from accessing the internet - yet still maintain a network connection to those computers. Of course, there are better ways to do this on a network level, but it has its purpose in certain situations.

It should be noted that all accounts that you apply this to must be set as "Limited Accounts" and not setup as "Administrators". The reason for setting the user account to a "limited account" is to make sure that nobody can install software. You do not want somebody to download and install another browser (Firefox, opera, safari, etc) as that will defeat all of this. This process only kills the internet for Internet Explorer. So, if you have any of those other browsers installed, you will want to take steps to keep only the Administrator Account from using those programs. (all of the aforementioned browsers allow you to set who can access them)

It should also be noted that you will need to do this for each *user accounts* on the computer - it is not a global setting! (plus, you probably do not want to do this for your primary/administrator account anyway!)

First: you will need to set the users account as "Administrator" (we will change this later) so that we can access certain things we'll need access to.

If are you unaware of how to change account types, I would suggest you pass on doing this yourself and call a friend who knows how to do so, because the rest of this will be much more advanced then simply changing a users account type from limited to administrator - Much more advanced!

After you have setup the secondary account as an Administrator log into that users account.

(1) Now Open Internet Explorer. Sorry, but this can only be done via IE... it will not work in Firefox, opera, safari, etc.

(2) Go to: Tools -> Internet Options -> Connections [tab] -> Lan Settings

(3) Under "Proxy Server" check the box to enable it.

(4) Set Address as:

(5) Change Port from "80" to "90" (if it is blank, insert 90)

These two screenshots show a before & after:

(6 & 7) Press "OK" (twice)

(8) Press the Windows "Start Button" -> Run -> gpedit.msc

(9) You will now need to drill down through the following values...

User Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> "Disable the Connections page"
(NOTE: Windows 7 has changed this to "Disable changing connection settings")

Once you find the "Disable the Connections Page" double-click on it. You should see the following screen:

(10) Select "Enabled"

(11) Press "OK"

(12) Press "File -> Exit"

Ok, those are the twelve steps necessary to complete the process.

What you will now want to do is go back to your primary Administrator account and change the user account back from an Administrator to a Limited account. (which was the first step in this whole process)

That is all there is to do. I'd advice you log into the users account and open up Internet Explorer just to make sure you did everything correctly!

So What Exactly Does All This Do?

In non-layman's terms... What this does is hard-code the proxy for IE and point it at the local network/computer. By doing so IE will also attempt to load the local network and never allow it to leave the local network. (i.e.: access the internet).

By going into the Group Editor we are then telling Windows to not even show the "Connections" tab within "Tools -> Internet Options" thereby making it almost impossible to change the proxy values back to default settings.

A tricky method to accomplish a simple task that one would think would naturally be within Windows, but isn't.

Hope this works for everybody. And, if you barf up your computer, don't blame me!

John B. Abela

(credit goes to my good friend folken who helped me put all this idea together a few months ago)

(Jan 09, 2011 - updated to indicate changes to Windows 7 changes)


John B. Abela+ is the owner of ChristianBlog.Com, a passionate believer in God's Blessings, and a guy who just really loves blogs! You can find out more about John at his profile page , twitter , facebook, google+.

Blog Sharing: 

Victoria Kerr(@victoriak)

  I restrict Internet access while I am not at home with help of parental control tool called Ez Internet Timer. It can stop all children's on-line activity and block Internet browsers, e-mails, ftps or messengers according to my daily schedule (differs for each son). It will take only one minute to do the trick. I also often set Ez Internet Timer to turn off Skype and MSN while my kid does her homework.

John B. Abela+(@abelajohnb)

I restrict Internet access while I am not at home with help of parental control tool called Ez Internet Timer. It can stop all children's on-line activity and block Internet browsers, e-mails, ftps or messengers according to my daily schedule (differs for each son). It will take only one minute to do the trick. I also often set Ez Internet Timer to turn off Skype and MSN while my kid does her homework.

I would just caution you that if your kids are even somewhat computer-savvy to be aware they have probably already figured out how to get around that piece of software, as it is not all that hard to do if you understand how computers work.

Sadly in this day and age kids are learning about computers fast than us "old folks" can keep up with. I have never seen any "parental control" software that actually worked. There are other better ways, but most of them require an adult who understands computers and how they work.

The essence of this blog "how to disable internet for a specific windows account" is much more designed to disable internet on a given computer within a work-place environment where there are always "eyes on" a given computer.


Kelly Platt(@abigailsfanclub)

  Hi John, I want to do this for Windows 7, and everything went fine until I did step 8. Then I received an error message which says, "Windows cannot find 'gpedit.msc.' Make sure you typed the name correctly, and then try again. Any advice? Thanks!

Mate Skublics(@nagyszakall)

  Thank you so much! This has been amazingly useful to me on one PC which runs windows 7 ultimate. Unfortunately, I have the same problem as "abigailsfanclub"another PC where I tried the same thing and couldn't succeed, because it has the home premium version. That one does not carry the gpedit.msc option. I tried to use a spreadsheet from Microsoft that seems to be explaining where to find stuff in the registry in order to accomplish the same thing you have helped me do on the other PC, which is to disable the connections page where the LAN proxy settings were done, but to no avail. I would so greatly appreciate if someone could explain to me (in amateurs' language) how to disable the connections page on a Windows 7 Home Premium platform.

Author: John B. Abela+
  Without using third-party software that will cost some money, which actually just limits what users accounts are able to do, there is no other way to accomplish what I have presented within this article, than the steps described in this article.

Guest/visitor: jyotirmayi banerjee

  The step by step procedure was quite handy. I have been able to successfully able to solve a tricky situation in office. How ever i found that procedure till step 7 would suffice to block access. need not go thru with other steps.

Add Your Comment:
Visitor/Guest Commenting:
We would love to have you join our website if you plan to comment within our website. If for some reason you do not want to join you can post your comment as a non-member. All comments will be held in queue and reviewed before being published/displayed.

First Name:   required

Last/Surname:   required

Email:   required

Country:   required

Add Your Comment: 
No html, website links, emails, etc.      Max characters: 1000
note: your blog comment will have to be approved by the blog author before it is made public

Policy Agreements: 

Math Verification:  + =  required

Add Your Comment: 
Copyright © 2014 ChristianBlog.Com Policies  -  Help/FAQ  -  Contact Us  -  Membership  -  News & Announcements