Windows 7: Stop IP address changes on PCs

I'm trying to stop my kids changing IP addresses on their computers.

I have set DHCP reservations in my DIR-655 router. I set each machine to DHCP and the reservation assigns the correct address.

Problem is, anyone can change the adapter properties any time they want. So I if block internet access from 3am - 6am on my sons PC using an access control rule, he simply changes his IP address to something else and he's back online.

I considered changing the subnet mask to 255.255.255.224, but that gives me 32(30) addresses, but I only have 13 devices, so that would still leave some vacant addresses for them to choose from.

There are a couple of settings in the group policy editor, but they don't work. Apparently this is a known issue. In any case, all users are administrators.

Is there anyway to stop them changing IP address, or locking out changes to the LAN connection properties, Control Panel applet or any other ideas?

Thanks
Tanya

Make them standard users.

Either that or start "gpedit.msc" and browse to where I found the setting to prohibit access:



However unless they are standard users, they will probably still have access to gpedit and can turn it back on.

These settings do not work. I have tried it on a test PC with a standard user and my PC.

And you're right about policy editor - though at this stage I don't think they've heard of it yet. But when challenged with restrictions teenagers can be remarkable learning machines when they want to be

Setting them to standard users is also not an option, unless I want to be spending an extra 10 hours a week on the machines

What I was really hoping for was a router based solution.

I posted on dlink and the consensus seems to be that the DIR655 is too "low end" to support any real form of security settings.

I used to be one of those teenagers you are describing now and I can promise you we are very hard to beat. I made my way around every content monitoring/blocking software/hardware put in my way. I would get a fancier router or maybe put software on the machines to limit use (if they can't figure out how to crash it by killing the processes/services and prevent it from starting in msconfig).

Well if he's getting around restrictions you're trying to put in, shouldn't you have a word with him?

When I was a teenager, my Mum put a timer thing on the power socket the router was plugged in to and it'd turn the power off to the router at like midnight until whatever time. Only way I could get back on was to unplug the timer. If I was found to have unplugged it, I'd get no computer use for a week.

There's also the parental controls within Windows 7 too that can limit computer usage.

Since DHCP reservations don't seem to work on your router, I would suggest unplugging it at night or putting it on a timer.

I have a DIR-655 also, but the reservation feature does work for me. If the IP I set on the PC does not match the reservation, the PC might be able to access (in limited capacity) the network, but not the Internet. Was is the hardware revision for your DIR-655? It says on the bottom of the unit. Upgrading with firmware from the US D-Link website might help.

Also, consider a /28 mask. That should give you about 14 addresses. (255.255.255.240)

You should be using MAC addresses to identify computers not IPs.
Windows 7 does not currently support changing MAC addresses.

Put the router in your bedroom....unplug when you go to bed....

Speaking as someone who went so far as to change the time in BIOS to allow myself more time on the computer, I can second the remark that we're hard to stop.

I see three viable solutions.* Firstly, and perhaps best, is to talk to your kids about it, and make sure they understand the rules. Also, don't just tell them the rules, make them repeat them back to you, and tell you the consequences you've instated will be. It helps ensure that they truly listen, and don't just glaze over during the conversation. Secondly, is to use mac-based filtration and limitation, rather than IP based. Also, change the defauly password on the router (if you haven't already) and find a way to tape/cover over the reset button that doesn't permanently disable it. Lastly, if all else fails, would be take the power brick to bed with you, and leave it on your night stand, with the policy that when you go to bed, the internet goes off. If they truly want it back at that point, make them earn it by demonstrating an ability to be responsible.



*please note: I'm not, in any of the following, suggesting you raise your kid differently than you choose to. I'm just giving my input, and hoping it helps with your situation.

Solved