prohibit access to server based on ip address

is there a way to only allow certain ip addresses access to a windows 2003
server without buying a third party firewall or using a vlan on your
network? like thru group policies?

IP addresses can be spoofed, therefore they can't reliably be used to
identify people. The proper mechanism for controlling access is to use named
user accounts. Then you create access control lists on the resources on the
server you want to permit access to, and place the account names in the
access control list.

--
Steve Riley
(E-Mail Removed)
http://blogs.technet.com/steriley
http://www.protectyourwindowsnetwork.com


"mikem" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> is there a way to only allow certain ip addresses access to a windows 2003
> server without buying a third party firewall or using a vlan on your
> network? like thru group policies?
>

You don't "access servers", you access resources on the servers, so you'd
have to define what "access the server" means. It all hinges on what
Resources are actually being accessed and what Application on the Server is
making the Resources available.

--
Phillip Windell
www.wandtv.com

The views expressed, are my own and not those of my employer, or Microsoft,
or anyone else associated with me, including my cats.
-----------------------------------------------------

"mikem" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> is there a way to only allow certain ip addresses access to a windows 2003
> server without buying a third party firewall or using a vlan on your
> network? like thru group policies?
>