Block User from any access to "NIC 1"

[ProfJim]

while allowing access to NIC 2. This is in a lab situation and no matter how often I say something people change things or try to go out the wrong interface - making my job harder as I have to go back and fix.

So I want to block them from changing the "School" NIC while allowing them access to the "LAB" NIC

On a related note - how can I have both cards active and working "w/o IP forwarding"

If i turn on the lab NIC all a sudden I cant get the internet. I tried
route add 192.168.0.0 255.255.0.0 (gateway) IF 2
but it doesnt help; basically I want anything 192.168.x.x to go to the LAB NIC and everything else to go out the SCHOOL NIC

Any ideas - I am not much of a Windows guru

Jim

 

[jimbopalmer]

if you leave off the default gateway on the Lab config, won't all nonlocal traffic choose the School NIC with a gateway?

I tried to remain child-like, all I acheived was childish.

 

[ProfJim]

Actually yes - that did hit me after my post. I tried it and that does work - see everyone local (MSCE guru types ;-) told me it cant be done and I hate being told it cant be done :-D

- but remember the 'student' part of this - you teach them they have to use a Gateway and then you tell them not to so I will have to explain to everyone "you do have a gateway on the other NIC and you can only have one"

So that leaves me to the "locking the School NIC so they cant change it" part while leaving the LAB NIC open to them. They will put school NIC on 192.x.x.x then it doesnt work then they start 'tech'ing it to see what is wrong and make things worse

Any ideas