Step 1, get rid of all your network cables. Extra savings: everyone knows the internet is wireless now anyway.

Step 2, set a company policy that only one device can be connected to the internet at a time. Even more cost savings as you don't need such an expensive connection for just one machine. Fosters better inter-departmental communication, and ensures the entire company is synergized and aligned to ensure optimal use of resources. Encourages radical, out of the box thinking styles so the company is better prepared to disrupt existing norms and capitalize on unique opportunities that other companies are too influenced by outside online opinions and information to actualize.

Step 3, Profit. You've provided the IT infrastructure and technology to meet the company's needs according to policy, so you can kick back, knowing that any complaint is firmly not your problem. Employees attempting to use resources against company policy is a training or disciplinary issue for their managers to handle. Time to get back to playing online games in the server closet using the backup internet connection you have for failover purposes.

1. Remove NAT
2. ???
3. Profit!

1. sysctl -w net.ipv4.conf.all.disable_ipv4=1
2. sysctl -w net.ipv6.conf.all.disable_ipv6=0
3. for link in $(ls /sys/class/net); do ip -6 addr add $(openssl rand -hex 2):$(openssl rand -hex 2):$(openssl rand -hex 2):$(openssl rand -hex 2):$(openssl rand -hex 2):$(openssl rand -hex 2):$(openssl rand -hex 2):$(openssl rand -hex 2)/128 dev $link; done

Everything should work perfectly forever right out of the box with the above setup.

1. Make sure every service and device is compatible with IPv6
2. Set IPv6 as default everywhere
3. Shut down all IPv4 DHCP and DNS servers