undo port trunk allow-pass vlan 1
conf t
int vlan 1
shut
switchport forbidden default-vlan
[admin@Mikrotik] > ip dns set allow-remote-requests=no
reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" /v LocalAccountTokenFilterPolicy /t REG_DWORD /d 1