RE: Changing the mac address on Windows 2000 and XP

["David Gillett" <gillettdavid () fhda edu>]

  Many NIC drivers provide this functionality (this is where the
"Advanced" tab at <Network Connection>->Properties->Configure<NIC>
comes from...).  And "raw packet" utilities may be able to bypass
the driver and emit packets with any MAC address desired.

  The change, to be detected, must correlate with something that 
isn't changing, typically either IP address ("arpwatch" will spot
that the MAC address associated with an IP address has changed) or
switch port (Cisco switches can be configured to allow only <n>
MAC addresses per port, for instance).

David Gillett
  

> -----Original Message-----
> From: Pranav Lal [mailto:pranav.lal () gmail com]
> Sent: Tuesday, July 05, 2005 9:26 AM
> To: security-basics () securityfocus com
> Subject: Changing the mac address on Windows 2000 and XP
>
>
> Hi all,
>
> Is there any way to change the mac address of a LAN card in Windows 
> 2000 and Windows XP?
>
> As a corollary to the question, how would one detect if a computer 
> was changing its mac address? This is assuming that the network on 
> which this machine is connected has DHCP enabled.
>
> Pranav