Security Basics mailing list archives

Re: RE: Changing the mac address on Windows 2000 and XP


From: sjohnson () karalon com
Date: 10 Aug 2005 07:42:46 -0000

Sorry didn't answer the second part of the question.

One way in which you could detecct that a MAC address had been changed would be to check the DHCP server lease tables.  
You will probably find the same machine name with two IP addresses and two MAC addresses (obviously not much use if 
someone is using the same machine name but its a start)

Sam


Current thread: