You may set the VM to use the network mode of NAT, so it emulates a real computer
on the network.
Once the VM is independent from the host, you may destroy the host's ability to use
the internet. Here are a couple of method I have thought of:
Configure the host with a static IP address that is not served by the router.
For example, if the router is serving 192.168.0.X
, set the host to use
192.168.1.1
.
If you wish to disable the resolving of website names to IP address,
set the host to use some non-existent DNS servers. This will not stop
internet access via IP address.
Do not disable the host's network card, since the VM will be using it.
1Why would you do this? What would you accomplish by doing this? – Christopher Hostage – 2019-11-10T20:39:23.103
If all you want to do is prevent access to web pages, then you can set the Windows host DNS server to a fake non-existent server on the local network. Then set the guest VM to use an actual public DNS server like Google or Cloudflare. – Christopher Hostage – 2019-11-10T20:42:37.820
It is common to have the host on a different VLAN than the VMs so maybe this questionis better to ask at Serverfault? – Mikael Dúi Bolinder – 2019-11-10T21:09:23.900
You should understand that disabling user access while leaving the host network card connected (which you must do) still leaves the host machine open to hacking. – John – 2019-11-10T21:21:40.700