Control DHCP

Hi all,
Using AD on server 2003. DHCP is enabled on the DC.
Is it possible to control the DHCP so that it does not hand in IP addresses
to clients without admin's password. This is so to prevent users with
personal laptops from accessing the corporate network.

Thanks
Yba

Hello Yba,

No, not by default. But you can with this additional steps:
http://blogs.technet.com/teamdhcp/ar...filtering.aspx

What you also can do is, to use manageble switches and only allow company
machine MAC addresses.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Hi all,
> Using AD on server 2003. DHCP is enabled on the DC.
> Is it possible to control the DHCP so that it does not hand in IP
> addresses
> to clients without admin's password. This is so to prevent users with
> personal laptops from accessing the corporate network.
> Thanks
> Yba

You can use group policy to set a Class ID on all the PC'c on your domain,
then set that Class ID as a scope option on the DHCP server so only those
get an IP.

"Yba" <(E-Mail Removed)> wrote in message
news:3C90AF4A-EC3F-4BC2-8EC3-(E-Mail Removed)...
> Hi all,
> Using AD on server 2003. DHCP is enabled on the DC.
> Is it possible to control the DHCP so that it does not hand in IP
addresses
> to clients without admin's password. This is so to prevent users with
> personal laptops from accessing the corporate network.
>
> Thanks
> Yba
>

Yba,
If you just want to make it difficult, you can reserve addresses for known
MAC's.
But a user can just find the range you are allocating and choose an address
that is not in use.
To prevent an unauthorized client connecting you need more than DHCP,
Anthony
http://www.airdesk.co.uk


"Yba" <(E-Mail Removed)> wrote in message
news:3C90AF4A-EC3F-4BC2-8EC3-(E-Mail Removed)...
> Hi all,
> Using AD on server 2003. DHCP is enabled on the DC.
> Is it possible to control the DHCP so that it does not hand in IP
> addresses
> to clients without admin's password. This is so to prevent users with
> personal laptops from accessing the corporate network.
>
> Thanks
> Yba
>