Re: Deny Change IP address with win xp
- From: "Jordan" <none@xxxxxxxx>
- Date: Thu, 3 May 2007 19:34:26 -0400
I had the same problem where a few engineers needed to be Admins on their
PCs so they could do some development. This is what I did to stick it to
them:
1. Have the ISA server and other machines that you want to be able to pass
the ISA setup in the low IP addresses like x.x.x.1 - 10. You don't really
have to do this, but it makes the next steps easier
2. Have your DHCP scope setup so it DOES NOT give the clients a default
gateway. Create reservations for those devices that do need the gateway and
fill that entry in for those computers.
3. Set your router to only allow x.x.x.1 -10 through so even if the Admins
add their gateway with netsh or Route Add they still can't get through.
4. If you have your network subneted or need access to other specific
networks you can use GP or a batch file to do the Route Add and add the
ability for all computer to reach those subnets or networks only via your
router.
Our ISP gives us 8 IPs so I have one router setup to handle my ISA and other
servers that need to get out and I have a couple of other routers that I
setup these rules on to allow special cases through.
<assistenza@xxxxxxxxxxxxxxx> wrote in message
news:1178213463.428068.175370@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Hi there
I had a win 2003 sbs premium with isa and exchange configured
we can't find a policy that deny sbs users to change the ip address
(they want to bypass isa server!!!)
NOTICE tha all tha users must be local administrator because they use
Autodesk Autocad!
we have find one gpo but it work only with win 2000!!!
PLEASE HELP!!!
.
- References:
- Deny Change IP address with win xp
- From: assistenza
- Deny Change IP address with win xp
- Prev by Date: Rogue GPO - Help Please
- Next by Date: GPO to force Screen saver on Login Screen
- Previous by thread: Re: Deny Change IP address with win xp
- Next by thread: Re: Deny Change IP address with win xp
- Index(es):
Relevant Pages
|
