How to disable computer ip address modification and restrict lan ip address Modification

How to disable computer ip address modification and restrict lan ip address Modification
If you modify the IP address at Will on the LAN, it will lead to an IP conflict attack, and also pose some hidden dangers to the network security. How can you disable the LAN from modifying the IP address and prohibit the computer from changing the IP address, there are several methods:
 
Method 1: Disable IP address modification through the registry.
 
"Start> Run", enter the regedit command to run the Registry Editor, select "Export Registry File" in the registry menu, and enter the file name to save in the pop-up dialog box, for example, "lockip", select "selected branch" for the export range, enter "HKEY_CURRENT_USER \ Software \ Microsoft \ Windows \ CurrentVersion \ Policies \ Network", and click "save, select the lockip file and right-click the "edit" command to open it. You can see that there is a row key and key value "" NoNetSetup "= dword00000000" Under the selected branch ", change the key value 00000000 to 00000001. If this row does not exist, add "" NoNetSetup "= dword00000001" to the next row of the selected branch.
 
Then, on the user's computer in the LAN, double-click the lockip file to add the content in the file to the Registry. If you want to change the IP address, sorry, the "Network Neighbor" attribute of the computer has been disabled.
 
Method 2: Prohibit the computer from changing the IP address through a software program that prohibits the modification of the IP address.
 
Although the computer can be prohibited from modifying the IP address through the registry, once the employee re-opens the registry for reverse modification, the IP address can be modified again. Therefore, in this case, we can use some specialized computer management software. For example, there is a "portable to USB port disabling software" (: http://www.grabsun.com/monitorusb.html), is a dedicated prohibit computer use USB flash disk, mobile hard disk and other USB storage equipment software, at the same time, disabling the USB storage device does not affect the use of non-USB storage devices, which can prevent copying computer files through the USB storage device. Disabled to USB software integrated with a "prohibit IP address modification" function, you only need to check the interface, the program will disable the local connection properties, in this way, the computer's IP address modification behavior can be completely prohibited. As shown in:
Figure: Disable IP address modification Tool
At the same time, disabling software from the firewall to the USB port can disable the computer from modifying the IP address, enable the Registry on the computer, disable the Device Manager, and disable the Group Policy, this prevents employees from modifying the IP address of a computer through the registry or group policy, so as to completely prohibit the computer from modifying the IP address.
 
In short, there are many ways to prohibit computers from modifying IP addresses, and prohibit lan from modifying IP addresses. Enterprises and institutions can choose based on their own needs.