it is possible to detect if somebody in the network it is using a cloned mac addresse. I use isa server 2000