Block Internet Acess on Specific Computer

Sir, the user account is as "Domain Admin" permission. so, they can edit the TCP/IP properties and the owner of the company can not change the same. because all user has permission to install or uninstall some software or drivers and some files that available on server and that access through network place. If i change the IP the network place also not accessible.

except the above any other way to block the specific IP or Computer to access the internet.

is to do it on the device that is used to connect to Internet. But you didn't yet tell what that is, although I asked above.

Kees

And why is that? Why would you have more than one domain admin level account? You don't need to give someone domain admin level access to be able to install/uninstall programs, and that is going to severely restrict your available options.

Still, I think Mark has it spot on that if this is some kind of unauthorized access, disable the account and pass the matter over to HR and/or your boss. Or if this is a small operation, the head of the company. Let them talk to the person in question and explain matters, then decide if any additional action is required.

It also clearly seems that you're in over your head with the administration of this network, so it might be worth it to hire on someone else or bring in a consultant to set everything up, document it for you, and you can be involved to kind of learn the system from the consultant.

You can do little if the user can change anything on the machines. If the user have administrator access they can undo anything you can put in.

Your best option would be to load a third party firewall software something like symantec endpoint. You could then let the user have full access to the machine but no access to the firewall settings.

Most other methods will not work if the users are hacker types. You cannot trust ip, mac or anything so even restrictions at the router will not work. You would have to put some form of authentication in the internet router so that a user must login to gain access. Still this is easily defeated if a user who has access works with a user who does not to gain access.