View Single Post
Old 08-02-2012, 08:39 AM   #2 (permalink)
BlackBerry Elite
knottyrope's Avatar
Join Date: Jan 2008
Location: Massachusetts
Model: PRIV
OS: 5.1.1
PIN: t of blood has been taken
Carrier: AT&T-US with I dee ten tee errors
Posts: 7,180
Post Thanks: 362
Thanked 374 Times in 344 Posts
Default Re: not BES related but ...: DHCP server question

yes this is a fun issue.

First make a policy that no one is allowed to modify the network in any way.
Second use AD policy to stop allowing people to enable int sharing or even make a DHCP server on their laptop.

Make a visitor policy that has to use special ports when connecting to internet or make them use wifi which helps out a lot with this issue.

Use a DHCP server scanner on the network to alert you when one is activated.

We had a 4 hour outage at the office because someone thought their home router with a switch would work as a switch only so they could test a network device. I had to look at every network port in the office to find it as email was down and no way to alert users to look.

Best to go with VLANs going forward. not a member to any AD group? go to visitor VLAN.
unlock your phone here
I am on
BES 12 running sweet for my DTEK60
Offline   Reply With Quote