| | Re: not BES related but ...: DHCP server question
yes this is a fun issue.
First make a policy that no one is allowed to modify the network in any way.
Second use AD policy to stop allowing people to enable int sharing or even make a DHCP server on their laptop.
Make a visitor policy that has to use special ports when connecting to internet or make them use wifi which helps out a lot with this issue.
Use a DHCP server scanner on the network to alert you when one is activated.
We had a 4 hour outage at the office because someone thought their home router with a switch would work as a switch only so they could test a network device. I had to look at every network port in the office to find it as email was down and no way to alert users to look.
Best to go with VLANs going forward. not a member to any AD group? go to visitor VLAN.