Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Stop client from changing nstatic IP address

05 Apr 2010   #1
Yanta

 
Stop client from changing nstatic IP address

Is it possible to stop someone changing their IP address, or setting their system to DHCP? I have ACLs defined and somone is changing their IP address to get around the rules. This only applies to one rogue person who just won't play by the rules, so I'd prefer not to make everyone suffer because of one rebel.

Eg. A registry change? Remove/Disable the network configuration?

thanks
Tanya


My System SpecsSystem Spec
.
05 Apr 2010   #2
PooMan UK

Windows 7 Ultimate 64bit
 
 

Hiya

If you don't mind me asking, What OS is on the clients machines ? and are you using a server (if so which OS please) or is it just a peer to peer network with a router using DHCP ?
My System SpecsSystem Spec
05 Apr 2010   #3
Tiffer

Windows 7 Home Premium x64
 
 

If you're using a Router maybe doing as I do and setting each IP a reserved address might help.

I have Netgear Router and it allows me to assign an IP address to each device on the Network. As this is tied to the devices MAC address, depsite them all using Auto DHCP configurations the router will always make sure each device gets the same address everytime.
Stop client from changing nstatic IP address-clipboard01.jpg

You could limit the IP address range to just cover the number of devices in your Network, then if someone did try to bypass DHCP they couldn't get a different IP as they would all be reserved with no "spares".


My System SpecsSystem Spec
.

05 Apr 2010   #4
CommonTater

XP Pro SP3 X86 / Win7 Pro X86
 
 

Quote   Quote: Originally Posted by Tiffer View Post
If you're using a Router maybe doing as I do and setting each IP a reserved address might help.

I have Netgear Router and it allows me to assign an IP address to each device on the Network. As this is tied to the devices MAC address, depsite them all using Auto DHCP configurations the router will always make sure each device gets the same address everytime.
Attachment 65218

You could limit the IP address range to just cover the number of devices in your Network, then if someone did try to bypass DHCP they couldn't get a different IP as they would all be reserved with no "spares".
That only works if they have DHCP running...

If they are changing static IPs DHCP reservations do nothing.
My System SpecsSystem Spec
05 Apr 2010   #5
Tiffer

Windows 7 Home Premium x64
 
 

Yes but if you reserved say addresses 192.168.2.2 to 192.168.2.6 on a 5 device Network and limited the Starting and Ending IP address range to just those 5 then surely the router wouldn't allow access to someone trying to use say 192.168.2.7 as it was out of this range.

They couldn't use any of the available 5 as they would all be assigned to particular MAC addresses. Unless of course they were clever enough to go down the MAC spoofing avenue!

If that's not the case I think the Router is maybe not as clever as its made out to be by some sources.
My System SpecsSystem Spec
05 Apr 2010   #6
CommonTater

XP Pro SP3 X86 / Win7 Pro X86
 
 

Quote   Quote: Originally Posted by Yanta View Post
Is it possible to stop someone changing their IP address, or setting their system to DHCP? I have ACLs defined and somone is changing their IP address to get around the rules. This only applies to one rogue person who just won't play by the rules, so I'd prefer not to make everyone suffer because of one rebel.

Eg. A registry change? Remove/Disable the network configuration?

thanks
Tanya
Tanya... There are ways in the Security Policy to prevent people from accessing certain control panel applets, etc... You could also set a deny security flag on the network control panel applet....

However... Having many times been asked to fix the carnage caused by the unchained child-mind, please let me suggest you might be further ahead addressing the source of the problem. What you risk by playing cat and mouse is that it will be seen as a challenge and the game will simply begin to escallate... which I'm pretty sure isn't what you want.

Far better I would think, to address at the "What the hell do you think you're trying to pull" level... You didn't say whether this was a work, home or school environment but in any event, confronting the bad actor is likely the only way you're going to stop it.
My System SpecsSystem Spec
05 Apr 2010   #7
CommonTater

XP Pro SP3 X86 / Win7 Pro X86
 
 

Quote   Quote: Originally Posted by Tiffer View Post
Yes but if you reserved say addresses 192.168.2.2 to 192.168.2.6 on a 5 device Network and limited the Starting and Ending IP address range to just those 5 then surely the router wouldn't allow access to someone trying to use say 192.168.2.7 as it was out of this range.

They couldn't use any of the available 5 as they would all be assigned to particular MAC addresses. Unless of course they were clever enough to go down the MAC spoofing avenue!

If that's not the case I think the Router is maybe not as clever as its made out to be by some sources.
Ahhh... now I see where you're going... good idea ...
My System SpecsSystem Spec
05 Apr 2010   #8
zigzag3143

Win 8 Release candidate 8400
 
 

Quote   Quote: Originally Posted by Yanta View Post
Is it possible to stop someone changing their IP address, or setting their system to DHCP? I have ACLs defined and somone is changing their IP address to get around the rules. This only applies to one rogue person who just won't play by the rules, so I'd prefer not to make everyone suffer because of one rebel.

Eg. A registry change? Remove/Disable the network configuration?

thanks
Tanya
Shoot the person, leave the NIC. You can make the network control panel read only and owned by admin.

You can force that mac address to=set ip in router. If he changes the IP the router wont pass it to the internet.

If there are only a few machines on the subnet you can define them all in the router, then block the rest of the subnet.

We need some more info

Ken
My System SpecsSystem Spec
06 Apr 2010   #9
Yanta

 

Quote   Quote: Originally Posted by PooMan UK View Post
Hiya

If you don't mind me asking, What OS is on the clients machines ? and are you using a server (if so which OS please) or is it just a peer to peer network with a router using DHCP ?
Clients are using WIndows 7 ultimate.

Yes, I have a server for our home web site, a syslog server and file storage. It runs Windows XP Sp3.
My System SpecsSystem Spec
06 Apr 2010   #10
Yanta

 

>Shoot the person,

leave the NIC. You can make the network control panel read only and owned by admin.

>You can force that mac address to=set ip in router. If he changes the IP the >router wont pass it to the internet.

If there are only a few machines on the subnet you can define them all in the router, then block the rest of the subnet.

We need some more info

Ken[/QUOTE]

I like the way u think. Unfortunately, I need him to pay rent :-)

I'll see if this D-Link allows me to do match MAC addresses to IP address.

There are 11 Windows 7 machines, 1 XP (used as a small server), 4 ipod/iphones (which use DHCP), a PC3, a Wii and an XBox.

The router is a D-Link DIR-655, which is very limited in it's capacity (32 IP addresses in ACLS, and 40 website filters etc). Internet is a cable connection. I use 192.168.1.x for the network. I currently use 101-106 for the DHCP addresses, basically to allow only the iphones/ipods. I have a rule that blocks all internet access for all addresses outside 192.168.1.14 - 192.168.1.100, and 192.168.1.107 - 192.168.1.249. Router is at 192.168.1.250. And 251-255 are also blocked.

The website I created delivers tailored content based on IP address. So each person sees their version of the website. hence why I have used static IP addresses.

I thought I had it tight enough, but he manages to grab one of the DHCP addresses.

thanks for your help.
My System SpecsSystem Spec
Reply

 Stop client from changing nstatic IP address





Please note  Please note
        When your issue is fixed please remember to thank those that helped you and mark the thread as solved.
Thread Tools




Similar help and support threads
Thread Forum
HOw to directly address 2nd PC on the client router, from behind AP ?
Network guru: need help here. months ago before changing a router I had an AP, and a 2nd router set as a Client Bridge, so pc's on one could detect pc's on the other. Can't recreate that for some reason but what I did get up and running is 2nd router in Client mode, so the 2nd router is...
Network & Sharing
My Ip Address Keeps On Changing!! Help
Hey guys i have a problem here im trying to host some gaming servers but my ip keeps on changing. Can you help me to make it stop changing ? Im using a WRT54GL linksys router.
Network & Sharing
changing the size of the address bar in IE9?
I am wondering if there is a way to condense the address bar in IE9? It's two rows by defualt. I'd prefer it to be one. Any thought's?
Browsers & Mail
Changing my ISP IP Address?
Well the reason why is because i share (well used to share) internet with my neighbors ever since they got me banned on stickam (ip banned). I go to stickam to hangout and meet people on the internet for fun. And there was a feature called "Shuffle", where you randomly meet someone who is using...
Network & Sharing
Changing MAC address in windows 7
Hi there, I m a new windows 7 user. I have got a windows 7 professional edition. I have updated my pc from win XP. But i m confused how can i change the mac address of my wireless lan. It's vendor is Broadcom and drivers are installed automatically by windows 7. Previous version of windows i...
Network & Sharing
changing mac address?
how do i change my mac address. i have windows 7 with a 32 bit op system.
Network & Sharing


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 22:04.
Twitter Facebook Google+ Seven Forums iOS App Seven Forums Android App