On Wed, Jan 19, 2005 at 11:18:00PM +0000, Saswata Banerjee wrote:

Satya ilugbom@thesatya.com wrote:

...

...

anybody can change IP address, maybe a more tech savvy customer. Apart from policy issue, it has to be made tamper proof.

Then it's an OS problem, for being insecure enough to allow a mere user to change OS parameters.

there is a utility in windows called poledit, which allows you to set policy for each pc. So you can set policy not to allow users (even admin) to change ip settings.

Also if you use win2k, admin can reduce rights to normal users and disallow them from changing network settings.

Then why did the other poster (see above) make that stupid comment? It's one or the other, and either way I'm right -- either lockdown the IP or you have an insecure OS. I said both these things, and every time I say one someone contradicts me with the other. Stop it.