General discussion

Locked

Block access to network

By williamoshea ·
DEAR COLLEAGUES,
I work in a Windows 2000 environment with Win2k pro and xp clients OS. I have fully implemented Group Policies. However some of the users of laptops have decided not to have their laptops added to the domain. SO WHAT THEY DO IS FIND ANY PATCHED CAT5 PORT, PLUG THEIR LAPTOPS IN, OBTAIN AN IP ADDRESS AND OFF THEY GO. IS THERE A WAY I COULD DENY THEIR LAPTOPS IP ADDRESS OR BETTER STILL STOP THEM FROM ACCESSING NETWORK RESOURCES UNLESS THEY ARE PROPERLY LOGGED ON TO THE NETWORK.

This conversation is currently closed to new comments.

6 total posts (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Comments

Collapse -

by p.j.hutchison In reply to Block access to network

I find that rather than using dynamic IP allocation. You could reserve all IP addresses for all clients. So if a user tries to connect a laptop they will not get an IP address.

Collapse -

by Coolflip In reply to Block access to network

I would just ensure that your domain only allows authenticated users to the resoures. IE..printers..shares on the network. Having the everyone group on these resources will give them access. Ensure the everyone group is taken away from these resources and isolate it to just domain users or groups.

Collapse -

by williamoshea In reply to

Poster rated this answer.

Collapse -

by CG IT In reply to Block access to network

Im with the second answer. thats the first thing we do when new recource are added. Remove the everyone group and only allow authenticated domain users access. that way they have to log on to the domain to gain access.

Collapse -

by williamoshea In reply to

Poster rated this answer.

Collapse -

by Rvickers78 In reply to Block access to network

The one problem I see with all these answers is just logging into and Windows 2000/XP box with the same username and password does authenticate to the domain.

Back to Windows Forum
6 total posts (Page 1 of 1)  

Related Discussions

Related Forums