The fundamental problem is that a knowledgeable user can sneak past the Profile for him to get to the default one. I would ping to check that another IP is available, then change the properties of my network connection to use that IP instead of DHCP. You would have to track me down by MAC address... if you could devine it[;)]
Cheers - Bob
Sophos UTM Community Moderator Sophos Certified Architect - UTM Sophos Certified Engineer - XG Gold Solution Partner since 2005
