HELP with locking LAN's IP address

I've assigned an IP address for each PC in a small LAN (192.168.100.10 ~ 192.168.100.80). I don't want to let the users of the PCs change the assigned IP addresses?

Is there anyway to disable the possibility of changing LAN's IP address of a PC ? (graying out the property of Internet Protocol TCP/IP or .....)


Any Kind of help or suggestion is much appreciated.

MnInShdw

 

do u have a dhcp server? adsl router maybe? or one machine on all the time, if so assing the ip's from there and make them static.

 

Hi SteveS,
million thanks for your reply.

I'm using one of the PCs and the whole Lan is connected to Internet through an ADSL router.

I need to stop some of the PCs connecting to Internet. For this purpose, I've assigned a IP address for each PC and have created some filtering rules for the Router. The router will filter the IP addresses and banned special IPs from connecting to Internet.

Now, the users of banned PCs can change their machines IP addresses and connect to Internet. I have been asked to find a sollution for this, somehow the users can not change their IPs ( or any other sollution that prevent some of the PCs being connected to internet.)

If static IPs is a sollution for this purpose, I'll be appreciated if you can post how I can do it or some links to study and learn it.

I appreciate any kind of input.

MnInShdw

 

What I think he was talking about is a feature a regular DHCP server will have and that your router's DHCP may have is to let DHCP assign the IP addresses but set some as either Manual Allocation (where you set the IP you want and tell DHCP to always assign it) or Automatic Allocation (where again, DHCP is told to always assign the same address to a device).

The usual setting for DHCP is Dynamic Allocation - the sort we are most familiar with.

This still wouldn't prevent a user from making changes after the machine is booted though. That will need a different approach and may not even be possible with all operating systems. What are your client PCs running?

 

Good morning Newt
and thanks for trying to help.

First of all I have to admit that I am absolutely a newbie in routers.
The version of OSes in our network is :

Windows 2000 Pro-Sp4 --------- 1 PC
windows Xp Home Sp2 ---------- 4 PCs
Windows Xp Pro Sp2 ------------ 8 PCs

I have seen the DHCP feature in router's settings and as far as I remember, there was two options : Automatic and Manual and I chose Automatic . I will check it out and will post back.

Any kind of reply, may be a big lesson for me.

MnInShdw

 

The DHCP feature of the mentioned router is set to Disabled

Just a thought : Isn't there any registry trick to gray out the property of Internet Protocol (TCP/IP) in Local Connection's property? If such a trick exists, I simply can change the registry settings in all the PCs.


Thanks
MnInShdw

 

gpedit.msc

Use group policy to disable users access to network connection properties.

 

Sorry for this dumb question. (I'm a newbie ).I opened group policy, but unfortunately wasn't able to find where I can disable users access to network connection properties.

Would you please direct me how I can do this? Even a link to a site with these information is much appreciated.


MnInShdw

 

It takes some playing with but pretty good help once you get inside. Highlight an item (as in the 2nd pic) and the explanation at the left shows up.

Problem - group policy is only available for 2K and XP-Pro so if you have problems on one of the XP-home systems, you'll need to take another route.

 

Wooow, It was my first try on group policies and how simple and powerful it is. Thanks for being patient with questions from a newbie. I was able to do what I was looking for, on our win2k and winXp pro machines. It's the first time I dared to play with group policy editor.


I appreciate your and all the others who shared their experiences.

MnInShdw

 

Glad to be able to help out.

At a guess, probably 99.99% of folks who mess with 2K & XP systems know way less about group policies than you did.

All sorts of good stuff you can do with it. A real shame XP-home doesn't have the feature. It is also great for folks with rowdy teenage users.

 

xp home

I never worked with xp home but a yahoo search brought this up.
You may want to take a look...

http://j79zlr.com/gphome.php#Network Conections

 

spazz - excellent find and thank you.

No way to tell without some testing exactly how many of those registry keys will function if added to XP-home but certainly worth a try.