Comment Feed for How to block changes to IP Address (TechOff on Channel 9)

Re: How to block changes to IP Address

cheong — Fri, 05 Oct 2007 10:34:26 GMT

Alternative but similar suggestion:

Name your current scope of DHCP "Public" and allow those "non-company-owned" PCs to get IP configs from there.

Then add another scope named "Business" and have each of your current machines on the reserve list.

Re: How to block changes to IP Address

AndyC — Fri, 05 Oct 2007 06:00:04 GMT

ed_de_wind wrote:

So, any other suggestions to solve my problem?

Use a bigger private subnet.

Shorten DHCP lease time.

Hand out static IP addresses via MAC reservations to known machines and only have a small pool for dynamic allocation to visitors.

Re: How to block changes to IP Address

ed_de_wind — Fri, 05 Oct 2007 03:42:16 GMT

Thanks for the response.
Can't do it either...coz all users are Administrators. I need to do this because sometimes the DHCP leased IP addresses has reached maximum number. This happens when guests, customers, or clients plug into the office network using their laptops. And that makes me think to stop using automatic generated IP from DHCP and switch to static IP. However, this won't stop them to still plug into the network, but at least they must ask for permission to get an IP to connect to the network.

But there is still one more problem with using a static IP. Users can easily change their IPs to a known IP of their colleague's. This, of course, can cause a problem for the user whose IP had been stolen.
So, any other suggestions to solve my problem?

Re: How to block changes to IP Address

cheong — Fri, 05 Oct 2007 02:32:02 GMT

How about making all users in systems you managed to be standard user (i.e. neither "Power Users" nor "Administrators") ?

I can't think of a method that doesn't allow administrators to change IP address of the current computer.