I'm dealing with the following scenario.
C1 - computer 1 used for work. Windows 7 with limited user account for worker.
R1 -- is wifi router 1. This router is allowed to be accessed by C1. It is WPA2 protected and thus the password is C1's ticket to R1 network. The user of C1 does not know the password, instead C1 remembers the password entered by admin. C1 should be restriced to R1's network.
R2 -- is a malicious wifi router on a personal mobile device.
There is no Windows Server OS in the network. I admin everything except R2 (attackers cell phone).
I need to restrict C1 in such a way that it can only connect to R1 and not any other router. Therefore, C1 should not be able to connect to R2 and R2 should not fool C1 into thinking it is R1.
How can this be achieved?