How to disable the networking capabilities of a PC that is not in a domain?

Question

System administration

When connecting a PC to the network, it is necessary that it does not allow connecting to the internal network and the Internet if the station is not in the domain

Answer 1

Maybe it's easier then not to connect to the network at all?
ps I'm not saying that the answers of colleagues are not good, maybe even excellent ... but the right thing is - if you need to castrate the workplace, you can simply take away the cable / ban the poppy on the switch. install updates as needed, maybe even once a year, but personally by the administrator

Answer 2

Specify gateway 127.0.0.1 (loopback) in DHCP for this computer.

Answer 3

https://docs.microsoft.com/en-us/windows/desktop/n...
look this way.
But this requires a fully functioning domain, a managed network, and so on.

Answer 4

The computer can be placed in a separate VLAN where, as he will not see anyone, so will he.
The convenience is that these settings can be controlled directly on the router / switch, rather than walking and pulling the computer.

Answer 5

A thousand and one ways, though if the user does not have admin rights (if there are, there are also ways, but much less) -
Specify
the gateway 127.0
.
and seal the connector (or fill it with something)
- Ban the port on the switch
- Put the port in a unique VLAN so that it is the only one :) The method is good because there is a link on the map;)
- if DHCP is used - configure it so that it did not give this poppy any IP