Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

We have recently installed Windows 7 for student computers. All student computers must be routed through our content filter which is located at 192.168.0.63. This was done in WinXP by adding a Default Gateway in the network adapter settings > TCP/IP Properties > Advanced > Default Gateway. All teacher computers are routed through the DHCP assigned Default Gateway of 192.168.0.1.

In WinXP the dhcp default gateway was correctly overridden by this manual setting. In Win7 it appears that the dhcp default gateway is retained and the manual one is added to the list so that there are two with the dhcp one having the primary metric.

I have tried several ways to remove the dhcp default gateway such as, running the "route delete 0.0.0.0 192.168.0.1" command. Doing this from an administrator command prompt works but it just resets upon reboot. I've tried adding this command to the registry's Run section but it seems to run as a non-administrator and therefore will not complete successfully.

Is there any way to prevent this and force the manual default gateway to override the dhcp one? Or to remove the dhcp assigned one automatically on boot/login?

HELP! We CANNOT allow student computers to connect to the internet without going through the content filter.

share|improve this question

migrated from superuser.com Nov 9 '12 at 20:49

This question came from our site for computer enthusiasts and power users.

    
Possible duplicate: How to tell Windows 7 to ignore a default gateway –  techie007 Nov 9 '12 at 16:19

3 Answers 3

There are some solutions availible:

  • Don't use DHCP at all for the student PC (or the teacher's PC's, thanks for the comment) and set them manually by simply configuring the network settings on said computer by hand.

or

  • Hardcode ipadresses and default-gatewways in your DHCP-Server using the MAC-Adresses that your computers have, and make sure that your students can't change those.

or if your particular hardware/budget allows for that

  • separate VLANs with their own IP ranges and DHCP scopes.
share|improve this answer
1  
Maybe i am missing something, but would it not be the better idea to do it the other way round? I suppose there are more student pcs than teacher pcs. So assign the filtered gateway through DHCP and assign the unfiltered one manually to the smaller share of machines. –  TheUser1024 Nov 9 '12 at 15:31
    
Yes, of couse you can do it this way as well. –  Bonsi Scott Nov 9 '12 at 15:37
    
A more elegant solution would be to TURN OFF Win7 multi-gateway capabilities so that it works like WinXP did. Simple. But HOW?!?! –  dgwilson Nov 9 '12 at 15:54
    
That's something i don't know about. –  Bonsi Scott Nov 9 '12 at 15:59

Surely the simple solution is to make the content filter the default gateway and either use a content filter that can identify users and assign different roles to different groups, or at the very least make the staff machines the ones that have the non-standard routing. The former method is certainly how we've been doing it.

share|improve this answer

I found a solution on my own. I added a logon.cmd script using the Local Group Policy Editor in the Computer Startup section (so it would run with Admin priviledges). The script contains the "route delete 0.0.0.0 192.168.0.1" command. Works great! I never did find a registry solution or any other way to mitigate this new feature in Win7. bleh!

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.