In the LAN, we often encounter the situation of IP address conflict, in fact, because others arbitrarily modify the IP address caused by, this article for you to introduce some methods to prohibit the modification of IP address.
How to prohibit the modification of IP address the first recruit: Cut off the IP portal
Modifying IP is typically modified by connection properties. We can disable the non-admin access connection properties to enable IP modification. Start Menu-run-Enter the "gpedit.msc"--> admin template--> Network--> network connection, and then turn on the "Prohibit access to LAN connection component Properties" "To enable Windows 2000 network connection settings for administrators" all OK.
But a computer to do so, if you manage the LAN is very large, the workload will be big. We can do this with a simple batch file. Create a new TXT file, name random, and then copy the following code to TXT file:
regsvr32/u Netcfgx.dll
Regsvr32/u Netman.dll
Regsvr32/u Netshell.dll
Echo reminds you that the settings have been successful!
Pause
Save the file, and then change the file suffix name to bat. By clicking on this batch file, you will find that the "Properties" option is not accessible when you right-click on the Network Neighborhood. If you want to re-access the property options for your network Neighborhood, change the/U of the file you just made to/s.
How to prohibit the modification of IP address the second trick: Binding MAC Address
Start Menu-run-enter "cmd", execute "ipconfig/all" command, in the pop-up window, the network card MAC address, IP address recorded; Then the specified IP address and the corresponding MAC address, binding together, even if someone in your computer, modify the IP address, he can not through the proxy server, the network connection. For example, to bind the IP address 10.115.223.198 to the NIC MAC address 00-00-0e-63-e6-3d, you need to execute the command line arp-s 10.115.223.198 00-00-0e-63-e6-3d in the command Prompt window. If you want to unbind, run the command line arp-d 10.115.223.198.
In addition, if you are managing a local area network using a three-tier switch to connect workstations, then you only need to at each switch port, the IP address limit, so that other people even if the IP address changed, can not go through the switch to the Internet.
Of course, you can also use a number of tools to prohibit the modification of IP to prohibit users on the LAN to arbitrarily modify the IP address. This is not a list.