Catalyst 2960 + 2 Win 10 PCs. How to make PC1 restrict PC2 from XYZ

[wiktor-kredzinski]

Hi,

If I connect these PCs to the switch, how do I create an Admin account on PC1 to make PC2 not be able to, for example, open Mozilla Firefox? Also switch is connected to router. Can I make a LAN for PC1 PC2 and Switch which is seperate from router LAN?

Bonus if you tell me how to do this.

[vishalbhandari]

@wiktor-kredzinski To restrict PC2 from opening Mozilla Firefox, you can create an Admin account on PC1 and set up Windows Group Policy or AppLocker to block access to Firefox. First, create a new user account on PC1 with limited permissions (non-admin). Then, use Local Group Policy Editor (gpedit.msc) or AppLocker to define rules that prevent certain users from launching Firefox.

For network separation, you can configure VLANs on your switch. Assign PC1 and PC2 to a VLAN (e.g., VLAN 10) and ensure the router is on a different VLAN (e.g., VLAN 20). This way, PC1 and PC2 will communicate only within their VLAN and not with the router’s LAN unless routing is configured. Let me know if you need specific switch commands!

[wiktor-kredzinski]

Thanks Vish,

So I need to create a Non Admin account on PC1 if I want PC1 to be the "Admin" computer in charge of GP policies etc? So wait GP will see PC2 and be able to restrict permissions? How so?

I will Google how to create VLANs but if you have any commands I should be aware of like you said I'd love that! 

Thanks!