How to disable IP address modification

Registry Setup Method

First, you need to hide the Network Places icon on your desktop so that others cannot access the TCP/IP parameter settings interface through the Network Neighborhood Properties window. Expand the HKEY_CURRENT_USER, Software, Microsoft, Windows, CurrentVersion, Policies, and explorer subkeys in the Registry Editing window, and then in the Under the Explorer subkey, create a double byte value of "Nonethood" and set it to "1".

Second, the Control Panel window in the "Network" icon, hidden, then the other people simply can not open the TCP/IP parameter settings interface. As soon as you open the "Windows/sys_tem (remove" _)/netcpl.cpl "file, and then at [Don" t load], enter a line of code such as "Netcpl.cpl=no", after the Save, the "network" icon from the Control Panel window disappeared.

Here, all the ways to modify the IP are "cut off", so that other people even want to modify the IP address, there is nowhere to go. Of course, this method can only be misty rookie netizens, for "prawn" class netizens, is almost deaf ears-furnishings. Because netizens once found "netcpl.cpl" file, there is still a way to restore the "network" or "online neighborhood" icon, for this, you still need to do the following work, in order to really "cut" the IP Modification channel:

Expand the HKEY_CURRENT_USER, Software, Microsoft, Windows, CurrentVersion, Policies, network subkeys in the registry, and then in the ". Network, create a two-byte value named "Nonetsetup" and set it to "1", and then you'll get a hint that you don't have access when you want to open the Network Neighborhood or Networking Properties window.

The TCP/IP parameters of the workstations in the LAN are arbitrarily modified, it is easy to cause the conflict of IPs, which will bring no small trouble to the management work. Then, there is no way to protect their own network, do not let others illegally modify the IP address?

In fact, very simple, you just refer to the following steps, you can easily avoid the problem of illegal IP address modification!

Address Binding method

In addition to by cutting off the "channel" to modify IP, to prevent other people from illegally modifying the IP address, you can also directly specify the IP address, so that other people even if the address has been modified, can not be connected to the network. When restricting IP addresses, you can use the address binding method:

First the system to switch to the DOS command line state, the implementation of the "Ipconfig/all" command, in the pop-up window, the NIC's MAC address, IP address recorded;

Below on the proxy server side, will specify the IP address and the corresponding MAC address, bind together, later even if someone in your computer, modify the IP address, he can not through the proxy server, network connection. For example, when binding the previous IP address, you can execute the "arp-s 10.168.160.10 00-30-6e-36-5a-ef" command on the DOS command line to "10.168.160.10" the static IP address and the MAC address of the network card. 00-30-6e-36-5a-ef "Bound together.

In the local area network, the workstation that uses proxy server to surf the Internet can use the above method to limit the modification of static IP address. If you need to "untie" the IP address in the future, just execute the "arp-d 10.168.160.10 00-30-6e-36-5a-ef" command.

If your LAN, using a three-tier switch to connect each workstation, then you only need at each switch port, the IP address limit, so that other people even if the IP address changed, can not go through the switch to the Internet.