Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Stop client from changing nstatic IP address

06 Apr 2010   #11
Yanta

 

Quote   Quote: Originally Posted by CommonTater View Post
Quote   Quote: Originally Posted by Yanta View Post
Is it possible to stop someone changing their IP address, or setting their system to DHCP? I have ACLs defined and somone is changing their IP address to get around the rules. This only applies to one rogue person who just won't play by the rules, so I'd prefer not to make everyone suffer because of one rebel.

Eg. A registry change? Remove/Disable the network configuration?

thanks
Tanya
Tanya... There are ways in the Security Policy to prevent people from accessing certain control panel applets, etc... You could also set a deny security flag on the network control panel applet....

However... Having many times been asked to fix the carnage caused by the unchained child-mind, please let me suggest you might be further ahead addressing the source of the problem. What you risk by playing cat and mouse is that it will be seen as a challenge and the game will simply begin to escallate... which I'm pretty sure isn't what you want.

Far better I would think, to address at the "What the hell do you think you're trying to pull" level... You didn't say whether this was a work, home or school environment but in any event, confronting the bad actor is likely the only way you're going to stop it.
I agree with your thoughts, and I wish it were that simple.

This is a home issue. My son. I've confronted him several times. I'm tearing my hair out, he wont do as asked. The problem is our Internet has mb limits per month. I continually ask him to limit his downloads, and use off peak, but he refuses to listen, resulting in our allowance running out mid month and being limited to 128kbps for the rest of the month. And we have 90gigs.

I've been trying to find a way to limit http downloads, and get monitoring software that will enable me to quantify exactly what is going on, but no matter where I turn there doesn't seem to be an effective solution.

I could get tough with him, but that will only serve to push him away. I can't seem to appeal to his sense of fairness, and cooperation; a problem that is typical of many people of his generation... but I digress... sorry.

Anyway, we'll see what happens when I match mac to IP in the router...

thanks
Tanya


My System SpecsSystem Spec
.
06 Apr 2010   #12
CommonTater

XP Pro SP3 X86 / Win7 Pro X86
 
 

Quote   Quote: Originally Posted by Yanta View Post
I agree with your thoughts, and I wish it were that simple.

This is a home issue. My son. I've confronted him several times. I'm tearing my hair out, he wont do as asked. The problem is our Internet has mb limits per month. I continually ask him to limit his downloads, and use off peak, but he refuses to listen, resulting in our allowance running out mid month and being limited to 128kbps for the rest of the month. And we have 90gigs.

I've been trying to find a way to limit http downloads, and get monitoring software that will enable me to quantify exactly what is going on, but no matter where I turn there doesn't seem to be an effective solution.

I could get tough with him, but that will only serve to push him away. I can't seem to appeal to his sense of fairness, and cooperation; a problem that is typical of many people of his generation... but I digress... sorry.

Anyway, we'll see what happens when I match mac to IP in the router...

thanks
Tanya
I can certainly empathise. My own lan is pretty open, basically if you know the passwords you've got access to everything and I try to be as trusting as possible... My family is grown, the youngest is 26 (and still at home ) for the most part it's me using the equipment but the rest gather on weekends, laptops in hand, to swap pictures and "borrow" movies and such... In total there are 8 machines on this lan.

I've had problems with friends of family guesting in and making a mess of stuff. Not long ago I had to nuke a couple of accounts where my son's friends had been hacking around on his passwords... But fortunately no harm was done.

I think what I'd be prone to do in your place would be to set limits and anyone going over their limit gets to pay their own way on the downloads... Maybe if it comes out of your son's own pocket he'll get the idea...

But I can promise you this... was this going on in my family, junior would quickly discover life without access... I'd just haul right off and block his mac address at least until he paid for the overages on the account. If that didn't work, he'd see first hand just how much damage an ax can do to a computer...

You and I are different... I don't mess with people who mess with me.

I do hope you can get this solved. There's nothing worse than an unresolved family conflict...

One more thing you can try is to set DHCP reservations on your router. Most DLinks support it. The idea is that each time a given device is connected it gets the same IP from DHCP, it's keyed to the MAC number. But it also prevents issuing a reserved IP to anything but that MAC address... so DHCP would fail and he would not get a connection. With the way you have everything else locked up, he's pretty much toast at that point. (Edit: I see this has already been suggested.... )
My System SpecsSystem Spec
06 Apr 2010   #13
PooMan UK

Windows 7 Ultimate 64bit
 
 

Whilst using the router is an option, and there are registry tweaks to disable certain icons, shortcuts etc. you could also maybe try a 3rd party software like Ultimate Windows Tweaker which is a free program which you just whack onto a usb pen (run it from the pen, don't leave it on the PC) then adjust the settings to the way you want, restart the machine ... job done. (you have to re run the util from the pen to undo the changes)

But I have to agree, a good talking to the responsible person would be a better option, explaing the security implications and damage that could be done is crucial. The thing is whatever option you go for surely this person will know that you've blocked the loophole and will be just as peed of as they would be after a good telling off. It's easy for me to say as I run a corporate network, but I have had to tell a few people off that thought they were clever, one or two ignored my Mr nice guy approach and carried on .... they got a surprise the next time they tried it when the "clear history" button had suddenly disappeared .... strange thing is they've never tried playing silly buggers since


Attached Thumbnails
Stop client from changing nstatic IP address-tweak.png  
My System SpecsSystem Spec
.

09 Apr 2010   #14
Yanta

 

[QUOTE=CommonTater;668824]
Quote   Quote: Originally Posted by Yanta View Post

[Editted ....]

One more thing you can try is to set DHCP reservations on your router. Most DLinks support it. The idea is that each time a given device is connected it gets the same IP from DHCP, it's keyed to the MAC number. But it also prevents issuing a reserved IP to anything but that MAC address... so DHCP would fail and he would not get a connection. With the way you have everything else locked up, he's pretty much toast at that point. (Edit: I see this has already been suggested.... )
Thanks everyone for your feedback. Sorry I haven't responded for a few days, been busy with the school holidays.

If I use the DCHP reservation, how would this go for the iPods and iPhones, I assume the same applies.

So, basically, I add a reservation for every PC, console and iPod device in the house (and I assume that also includes my Canon MX850 network attached printer), after first setting my dhcp range so that I can keep the same addresses.

Well, I'll set it up now that the kids have gone to stay with the ex for a few days and see what happens.

thanks for all your help.
My System SpecsSystem Spec
09 Apr 2010   #15
CommonTater

XP Pro SP3 X86 / Win7 Pro X86
 
 

Quote   Quote: Originally Posted by Yanta View Post
So, basically, I add a reservation for every PC, console and iPod device in the house (and I assume that also includes my Canon MX850 network attached printer), after first setting my dhcp range so that I can keep the same addresses.
Yep... then block all other IPs. The reservation keys to the device's MAC address so you have to have it connected when creating the reservation. Then you set everything to DHCP... Junior gets 1 address and 1 address only, no matter what he does... and you can block that if you need to.

(Read back through the thread... I can't take credit for the idea... it wasn't mine.)
My System SpecsSystem Spec
09 Apr 2010   #16
Barman58

Windows 10 Pro x64 x3, Ubuntu
 
 

One other thing that may be an option - this depends on having full password control of the router, so may be difficult to control in a home environment.

the use of a DNS service in the router, such as OpenDNS, allows you to blacklist the complete peer to peer network set or to individually blacklist specific sites.this may solve your issue.
My System SpecsSystem Spec
21 Apr 2010   #17
Yanta

 

WEll, I've had the dhcp reservation set up for just over a week now, and so far so good.

But I'd like to know more about the openDNS, Barman58.

I am the only one with access to the router. No one has the password, and I do not allow any one to play with it.

Can u provide a little more info, or provide some links?

thanks
Tanya
My System SpecsSystem Spec
21 Apr 2010   #18
Barman58

Windows 10 Pro x64 x3, Ubuntu
 
 

Hi Tanya,

All you need to know about OpenDNS can be found at their website.


OpenDNS | Internet Navigation And Security

Changind the DNS servers to their addresses should normally improve the performance over the ISP locations - assuming that the ISP will allow this (most will)

Take a little time to read about the blocking options and then give them a try.
My System SpecsSystem Spec
21 Apr 2010   #19
mpcrsc562

Windows 7 Ultimate x64
 
 

In addition to Barman58's input...
Some of the services OpenDNS offers (I use the free option)


Attached Thumbnails
Stop client from changing nstatic IP address-opendns2.png   Stop client from changing nstatic IP address-opendns3.png  
My System SpecsSystem Spec
25 Apr 2010   #20
Yanta

 

Thanks all. I have set up opendns (using the free option).
I have set up the dhcp reservations and it seems to be working well, with one exception, which appears to be related to the router, and I've followed up with D-link for that.

thanks for all your help and support.
Tanya
My System SpecsSystem Spec
Reply

 Stop client from changing nstatic IP address





Please note  Please note
        When your issue is fixed please remember to thank those that helped you and mark the thread as solved.
Thread Tools




Similar help and support threads
Thread Forum
HOw to directly address 2nd PC on the client router, from behind AP ?
Network guru: need help here. months ago before changing a router I had an AP, and a 2nd router set as a Client Bridge, so pc's on one could detect pc's on the other. Can't recreate that for some reason but what I did get up and running is 2nd router in Client mode, so the 2nd router is...
Network & Sharing
My Ip Address Keeps On Changing!! Help
Hey guys i have a problem here im trying to host some gaming servers but my ip keeps on changing. Can you help me to make it stop changing ? Im using a WRT54GL linksys router.
Network & Sharing
changing the size of the address bar in IE9?
I am wondering if there is a way to condense the address bar in IE9? It's two rows by defualt. I'd prefer it to be one. Any thought's?
Browsers & Mail
Changing my ISP IP Address?
Well the reason why is because i share (well used to share) internet with my neighbors ever since they got me banned on stickam (ip banned). I go to stickam to hangout and meet people on the internet for fun. And there was a feature called "Shuffle", where you randomly meet someone who is using...
Network & Sharing
Changing MAC address in windows 7
Hi there, I m a new windows 7 user. I have got a windows 7 professional edition. I have updated my pc from win XP. But i m confused how can i change the mac address of my wireless lan. It's vendor is Broadcom and drivers are installed automatically by windows 7. Previous version of windows i...
Network & Sharing
changing mac address?
how do i change my mac address. i have windows 7 with a 32 bit op system.
Network & Sharing


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 04:38.
Twitter Facebook Google+ Seven Forums iOS App Seven Forums Android App