InterviewSolution
| 1. |
Solve : I.P. address? |
|
Answer» There are 50 pcs in our local network.some of he pcs are provided with internet IP address & only these pcs have permission to access the Internet. So the other users are hacking the IP addresses and using internet services. We want to prevent them from editing I.P. address in network properties window. Please HELP me out.So your router is configured to block certain IP addresses from accessing the internet, right? hi friend, i understand your situation please try this site ..... to help you, i think it may help you out.. Don't spam our forums. (Reported)Quote from: psk1977 on August 03, 2010, 11:25:37 PM There are 50 pcs in our local network.some of he pcs are provided with internet IP address & only these pcs have permission to access the Internet. So the other users are hacking the IP addresses and using internet services. We want to prevent them from editing I.P. address in network properties window. Please help me out. What are you using to control which IPs have access? I know in ISA Server 2004/2006 (and, presumably Forefront THREAT Management Gateway 2010) there are plenty of options for RESTRICTING Internet access. Instead of using IP addresses, try prohibiting User Names instead. It's a lot easier to control that instead of having to make a ton of DHCP reservations or manually assigning static IPs to every PC. Either way, if users within the network are changing their IP addresses, then not only do they need to be accountable, but a Group Policy should be in place preventing them from doing that in the first place. User Configuration -> Administrative Templates -> Network -> Network Connections: Enable "Prohibit Access to the properties of a LAN connection" User Configuration -> Administrative Templates -> Start Menu and Taskbar: Enable "Remove Run menu from Start Menu" User Configuration -> Administrative Templates -> Control Panel Enable "Prohibit Access to the Control Panel" User Configuration -> Administrative Templates -> Desktop Enable "Hide Network Locations from Desktop" User Configuration -> Administrative Templates -> System -> CTRL+ALT+DEL options Enable "Remove Task Manager" User Configuration -> Administrative Templates -> System Enable "Prevent access to REGISTRY editing tools" Enable "Prevent access to the command prompt" You could simply establish one DMZ on the network for internet usage and one DMZ on the network without internet usage. Then just apply the corrispoding IP Adress to the corrisponding computors and make the administrator the only one with capabilities of changing the IP Adresses. Sounds like you got a roudy bunch of computer nerds working for you. |
|