We are doing a security review in our office and I have been tasked with redesigning the IP scopes used by DHCP in our domain. The goal is to be able to define access policy by user needs identifying users by what IP subnet they are in. I am wondering if you can control which scope a client computer is getting an IP address from by either user group or computer group. User group would be preferrable but it may or may not be worth it since lease times would probably have to be much shorter. Has anybody setup DHCP to do this in their organization? and if so how?
