Restrict users access on company network

We have the problem that visitors take their personal laptop to the company
and connect them to the network with the networkcable (no wireless network
available at this moment, but shall come available in the near future).
We should filter these pc's out and give them limited access or no access at
all depending weather that person is authorized to consult info in the
network (we would like to keep the administration as simple as possible, with
no intervention on pc).
We would like to use IAS as Radius Server to solve this problem.
Is that possible?
? Yes : how can this be done
? No : are there alternative solutions.

"Benny Huyghe" <Benny (E-Mail Removed)> wrote in message
news:C233DB7C-19D1-4FA5-A85B-(E-Mail Removed)...
> We have the problem that visitors take their personal laptop to the
> company
> and connect them to the network with the networkcable (no wireless network
> available at this moment, but shall come available in the near future).
> We should filter these pc's out and give them limited access or no access
> at
> all depending weather that person is authorized to consult info in the
> network (we would like to keep the administration as simple as possible,
> with
> no intervention on pc).
> We would like to use IAS as Radius Server to solve this problem.
> Is that possible?
> ? Yes : how can this be done
> ? No : are there alternative solutions.

1. This is a human problem, not a techincal problem. Management needs to
control what their humans do, while the IT staff controls with the companies
computers do. They hired the humans,..it's there humans,...they need to
control their humans.

2. Don't leave "live" network jacks lying around unused. Disconnect the
jacks at the patch panel. If users start upluging their workstations from
the LAN to plug their own Laptop into the "live" jack then the Management
needs to deal with them directly.

Their is no other "good" solution that I have ever heard of and thought it
was reasonable.

--
Phillip Windell
www.wandtv.com

The views expressed, are my own and not those of my employer, or Microsoft,
or anyone else associated with me, including my cats.
-----------------------------------------------------

What we control the network access is Cisco ACS plus Microsoft IAS. This
link may give more details.

Cisco Access Control Server
http://www.howtocisco.com/cisco/howto/acs0.htm

--
Bob Lin, MS-MVP, MCSE & CNE
Networking, Internet, Routing, VPN Troubleshooting on
http://www.ChicagoTech.net
How to Setup Windows, Network, VPN & Remote Access on
http://www.HowToNetworking.com
"Benny Huyghe" <Benny (E-Mail Removed)> wrote in message
news:C233DB7C-19D1-4FA5-A85B-(E-Mail Removed)...
> We have the problem that visitors take their personal laptop to the
> company
> and connect them to the network with the networkcable (no wireless network
> available at this moment, but shall come available in the near future).
> We should filter these pc's out and give them limited access or no access
> at
> all depending weather that person is authorized to consult info in the
> network (we would like to keep the administration as simple as possible,
> with
> no intervention on pc).
> We would like to use IAS as Radius Server to solve this problem.
> Is that possible?
> ? Yes : how can this be done
> ? No : are there alternative solutions.