Question: What security software do you recommend for workstation with Win2008R2 ? I need to protect only this one workstation so there is no need to have tons of features that support managing other clients. Can Forefront Client Security be installed in a way it is client that protects one local machine without installing all server infrastructure? Wouldn't FCS be kind of overkill? 

Of course I can try with some other vendors solution for Win7 security product or even something like Comodo Internet Security (free version) but since I have MSDN subscription I would like to take advantage of that.

Answer: 
From [Here](http://www.irongeek.com/i.php?page=security/changemac)

***Method 1:***

This is depending on the type of Network Interface Card (NIC) you have. If you have a card that doesn't support Clone MAC address, then you have to go to second method.

a) Go to Start->Settings->Control Panel and double click on Network and Dial-up Connections.

b) Right click on the NIC you want to change the MAC address and click on properties.

c) Under "General" tab, click on the "Configure" button

d) Click on "Advanced" tab

e) Under "Property section", you should see an item called "Network Address" or "Locally Administered Address", click on it.

f) On the right side, under "Value", type in the New MAC address you want to assign to your NIC. Usually this value is entered without the "-" between the MAC address numbers.

g) Goto command prompt and type in "ipconfig /all" or "net config rdr" to verify the changes. If the changes are not materialized, then use the second method.

h) If successful, reboot your system.

***Method 2:***

This should work on all Windows 2000/XP systems

a) Go to Start -> Run, type "regedt32" to start registry editor. Do not use "Regedit".

b) Go to `"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\ Control\Class\{4D36E972-E325-11CE-BFC1-08002BE10318}".` Double click on it to expand the tree. The subkeys are 4-digit numbers, which represent particular network adapters. You should see it starts with 0000, then 0001, 0002, 0003 and so on.

c) Find the interface you want by searching for the proper "DriverDesc" key.

d) Edit, or add, the string key "NetworkAddress" (has the data type "REG\_SZ") to contain the new MAC address.

e) Disable then re-enable the network interface that you changed (or reboot the system).

***Method 3:***

Use the program [Etherchange](http://ntsecurity.nu/toolbox/etherchange/)

***Method 4:*** ( windows 9x)

Use the same method as Windows 2000/XP except for the registry key location is `"HKEY_LOCAL_MACHINE\System\ CurrentControlSet\Services\Class\Net"` and you must reboot your system.
Some network adapters allow you to change the MAC address of a network adapter through their configuration dialog:

![enter image description here](https://i.stack.imgur.com/EDZkF.png)

An example is shown in [this screencast](http://www.youtube.com/watch?v=pMIM0tCi1R4). But please keep in mind that this doesn't relate to all network adapters!