Ok here is my idea: I have a network that is very focused on security, with a small amount of workstations (50). We have no wireless network nor will we ever. We are also fairly concerned with the idea of people simply plugging into a switch or cat5 cable and getting on the network. Would it be beneficial to us to move to a system where we leave DHCP on, but disable the scope, and simply use all DHCP reservations, so that someone wont pull an IP if he plugs in? Obviously he could set his IP statically, but I dont know how he would be able to find the IP format we use. Assuming someone did not previously have that IP info, and could not log on to any workstations to find it, is this a viable option? Am I just crazy? Let me know what you think about this, and about securing a network in this manner in general.
