Static IP Question

I have quite a complex setup, and part of it involves Websense web filtering.
I use static IP for lots of reasons and don't want to switch to DHCP. I also
use ISA Server, but only for caching, not firewall (as I have a hardware
firewall). One problem is Websense works on IP addresses, and I have several
which for each address provides different levels of filtering. One person in
particular keeps changing the IP address of his machine (when other people's
machines are switched off) to match someone who has more web access. I would
like to prevent this happening either at the workstation level (XP Pro) or at
the server (Win 2003 SBE). Is there a way I can do this so that his mac
address is forced to use a particular IP address on the server, otherwise his
internet will not work?

Use the ISA server for authentication and proxy and build a policy that is
tied to the user, not the IP address. Then it doesn't matter. I would post
over in the networking.firewall NG to see if folks can help you on that
setup.

- Ed

"PhilA" <(E-Mail Removed)> wrote in message
news:7F3B4316-2080-46DA-9997-(E-Mail Removed)...
>I have quite a complex setup, and part of it involves Websense web
>filtering.
> I use static IP for lots of reasons and don't want to switch to DHCP. I
> also
> use ISA Server, but only for caching, not firewall (as I have a hardware
> firewall). One problem is Websense works on IP addresses, and I have
> several
> which for each address provides different levels of filtering. One person
> in
> particular keeps changing the IP address of his machine (when other
> people's
> machines are switched off) to match someone who has more web access. I
> would
> like to prevent this happening either at the workstation level (XP Pro) or
> at
> the server (Win 2003 SBE). Is there a way I can do this so that his mac
> address is forced to use a particular IP address on the server, otherwise
> his
> internet will not work?

Remove local administrator rights to the user.

PhilA wrote:
> I have quite a complex setup, and part of it involves Websense web
> filtering. I use static IP for lots of reasons and don't want to
> switch to DHCP. I also use ISA Server, but only for caching, not
> firewall (as I have a hardware firewall). One problem is Websense
> works on IP addresses, and I have several which for each address
> provides different levels of filtering. One person in particular
> keeps changing the IP address of his machine (when other people's
> machines are switched off) to match someone who has more web access.
> I would like to prevent this happening either at the workstation
> level (XP Pro) or at the server (Win 2003 SBE). Is there a way I can
> do this so that his mac address is forced to use a particular IP
> address on the server, otherwise his internet will not work?