Discussion Locked

No internet access for non domain user?

0 helpful
3 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Currently i setup our Window server 2003 to connect our modem router and right under my 2k3, i have a switch an a router.

2k3 server is running NAT and my router under my server is doing the DHCP. So is there a way that i can setup to allow internet access to user that logon to our domain. Those that didn't logon to our domain server will not have any internet access?

3 replies

by sgt_shultz

what about setting up a proxy server box and then setting up ad so only authenticated domain users can get there? with dhcp server turned on on the internet router, i don't see how you can keep folks from getting on the internet...dhcp bad idea for security. dns server on internet bad idea for security. proxy server good. dhcp bad.

by iain z-uk

As a cheap and nasty way you couldaet your dhcp server to give out a false default gateway address so all clients get the wrong address then for anyone who logs on to the domain have a domain log on script that adds a routing command with a lower metric to real address of your default gateway. I personally use ISA and that works a treat.

HTH

Iain

This discussion is closed to new replies.