Setting up a restricted user on W2000

[Jomama]

I set up a w2k machines for techs to use for finding parts etc. I have set up a "user" account that allows them to access everything without being able to make changes or install anything.
I cant find a way to disable access to the local network.
I tried using a "guest account" but it is too restrictive.
Any suggestions?

[AnotherMuggle]

You will need to set up a policy to restrict access to the network.

[Jomama]

Right, I went thru the policy settings and didnt see one that matches that. Can you help?

[AnotherMuggle]

Hi, I may be able to offer some assistance but please can you expand upon "disable access to the local network"

[Jomama]

This is a P2P workgroup with shared folders on 3 other machines. I don't want the 2k machine to be able to browse the network with the "user" logon. It has its own printer and all the information they need is on the local hard drive. The machine has an "administrator" logon so that updates can be easily done.
I would like to avoid disconnecting the nw cable from the router to solve this.

[Ob1]

remove the client for microsoft networks from the LAN connection.

[Jomama]

OK, but won't that also disable the admins ability to browse? I want to keep just "user" from browsing.

[Ob1]

yes it will.

you can just uncheck it leaving the service installed but not active, and when you need to login as an administrator you can check the box to activate it, do what you need to do and uncheck it again, it takes about a second and there is no reboot required if you just check/uncheck. i know its not pretty but its a temp solution. i'll take a look at my group policy book to see if it has any answers.

[Jomama]

Thanks for the input. I'll use that for now.
It sounds so simple, I would think there is a software switch for it. Maybe not.

[Ob1]

i know, i thought the same thing when i saw this post. which is y i recommended removing the client for microsoft networks option.

if you have a FTP server setup, you could put stuff in there and then just connect over to the FTP server when needed to move certain stuff over to this machine, without having to mess with checking and unchecking client for microsoft networks.

[Jomama]

Noted, thanks again.