Click here to get back home

Block Unauthorized Computer

 HomeNewsGroups | Search | About
 microsoft.public.windows.server.security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content
Subject Author Date
Block Unauthorized Computer Dave Mackler 10-31-2007
Posted by NeilH on November 1, 2007, 8:37 am
Please log in for more thread options
I would also be looking at your company policy on connecting to the computer
network!.
Why has someone brought in a Home computer and attempting to access the
network?

> Thanks to all for the suggestions and insight. I believe this is simply
> somehome bringing in a home computer with no malicious intent. The simple
> first try, as suggested in responses, is to make a reservation for the MAC
> address with an out-of-range IP.
>
> Thanks to all, interesting thread.
>
> dave Admin
>
>
>
> > My servers are Server 2003, SP2. I have DHCP running well. I noticed a
> > computer name in the Address list of the DHCP server that is not a
> > computer that belongs to our company. All I have is the computer name
and
> > MAC address, which DHCP catches.
> >
> > How can I block or prohibit this computer from getting an IP address or
> > from using our network for whatever purpose??
> >
> > dave Admin
> >
> >
> >
>
>
>



Posted by Jeff Jones on November 2, 2007, 3:49 am
Please log in for more thread options

> Thanks to all for the suggestions and insight. I believe this is simply
> somehome bringing in a home computer with no malicious intent. The simple
> first try, as suggested in responses, is to make a reservation for the MAC
> address with an out-of-range IP.

Same situation I had the other day. One comment, make sure the reservation
also gives them a "bad" DNS. I did have a chat, and explained the next time
there supervisor would be informed. It's a small company, and some
flexibility is allowed in handling such situations.

Jeff
>
> Thanks to all, interesting thread.
>
> dave Admin
>
>
>
>> My servers are Server 2003, SP2. I have DHCP running well. I noticed a
>> computer name in the Address list of the DHCP server that is not a
>> computer that belongs to our company. All I have is the computer name
>> and MAC address, which DHCP catches.
>>
>> How can I block or prohibit this computer from getting an IP address or
>> from using our network for whatever purpose??
>>
>> dave Admin
>>
>>
>>
>
>
>



Posted by Dave Mackler on November 7, 2007, 8:08 am
Please log in for more thread options
Jeff et al,

Giving the reservation did not work as the server nixed reserving an IP
address outside the scope pool of addresses.

How did you apply a bad DNS to a single M<AC address??

dave


>
>> Thanks to all for the suggestions and insight. I believe this is simply
>> somehome bringing in a home computer with no malicious intent. The
>> simple first try, as suggested in responses, is to make a reservation for
>> the MAC address with an out-of-range IP.
>
> Same situation I had the other day. One comment, make sure the
> reservation also gives them a "bad" DNS. I did have a chat, and explained
> the next time there supervisor would be informed. It's a small company,
> and some flexibility is allowed in handling such situations.
>
> Jeff
>>
>> Thanks to all, interesting thread.
>>
>> dave Admin
>>
>>
>>
>>> My servers are Server 2003, SP2. I have DHCP running well. I noticed a
>>> computer name in the Address list of the DHCP server that is not a
>>> computer that belongs to our company. All I have is the computer name
>>> and MAC address, which DHCP catches.
>>>
>>> How can I block or prohibit this computer from getting an IP address or
>>> from using our network for whatever purpose??
>>>
>>> dave Admin
>>>
>>>
>>>
>>
>>
>>
>
>
>




Posted by Steven L Umbach on November 7, 2007, 7:39 pm
Please log in for more thread options
That is by design. To do what you want you would have to create the
reservation within the a scope that possibly could be created for only that
purpose - creating reservations and using all the IPs in the small scope for
reservations or temporarily creating exclusions for the IPs in the scope
that are not to be used so that legitimate computers do not get an IP from
that scope and then specify bogus default gateway/DNS/wins for that scope in
options to limit what the user can do with that IP lease such as no internet
access.

Steve


> Jeff et al,
>
> Giving the reservation did not work as the server nixed reserving an IP
> address outside the scope pool of addresses.
>
> How did you apply a bad DNS to a single M<AC address??
>
> dave
>
>
>>
>>> Thanks to all for the suggestions and insight. I believe this is simply
>>> somehome bringing in a home computer with no malicious intent. The
>>> simple first try, as suggested in responses, is to make a reservation
>>> for the MAC address with an out-of-range IP.
>>
>> Same situation I had the other day. One comment, make sure the
>> reservation also gives them a "bad" DNS. I did have a chat, and
>> explained the next time there supervisor would be informed. It's a small
>> company, and some flexibility is allowed in handling such situations.
>>
>> Jeff
>>>
>>> Thanks to all, interesting thread.
>>>
>>> dave Admin
>>>
>>>
>>>
>>>> My servers are Server 2003, SP2. I have DHCP running well. I noticed
>>>> a computer name in the Address list of the DHCP server that is not a
>>>> computer that belongs to our company. All I have is the computer name
>>>> and MAC address, which DHCP catches.
>>>>
>>>> How can I block or prohibit this computer from getting an IP address
>>>> or from using our network for whatever purpose??
>>>>
>>>> dave Admin
>>>>
>>>>
>>>>
>>>
>>>
>>>
>>
>>
>>
>
>
>



Similar ThreadsPosted
Can a Computer (so everyone who logs on on that computer) have access rights? January 12, 2006, 6:50 am
W2K - Block USB through GPO ? July 12, 2005, 10:43 am
block IM August 19, 2005, 11:16 am
Block MSN Messenger August 18, 2005, 5:03 pm
Block Toolbars April 26, 2006, 1:22 pm
How to Block UltraSurf? July 17, 2008, 9:50 am
Block file copy October 4, 2005, 10:10 am
ipsec to block ip range November 22, 2005, 12:12 pm
Block server reboots? April 4, 2007, 2:22 pm
Block Remote Control July 6, 2007, 1:18 pm

Our other projects:

Art Dolls, Fairies and Mermaids - Sunnyfaces.net

Roy's Linux, Programming and Search Engines messages

1-Script XML SitemapXML Sitemap