Secure DHCP

Hi Guys,

Is there a way to secure a DHCP server to ONLY allow domain computers to
receive leases ? I'm thinking along the lines of a group policy being applied
to domain computers or something of that nature...


Donavan

Donavan <(E-Mail Removed)> wrote:
> Hi Guys,
>
> Is there a way to secure a DHCP server to ONLY allow domain
> computers to receive leases ? I'm thinking along the lines of a group
> policy being applied to domain computers or something of that
> nature...

Group policy stuff doesn't even come into it at this level (layer) - the
device would already have an IP address by the time that kicked in.
If you want to secure access, either use DHCP reservations for all your
clients (a pain) or look into fancy layer-3 switches that can help with this
sort of thing.

* Donavan <(E-Mail Removed)>:
> Is there a way to secure a DHCP server to ONLY allow domain computers to
> receive leases ? I'm thinking along the lines of a group policy being applied
> to domain computers or something of that nature...

You want 802.1x Authentication.

You will need a switch that supports this, and install IAS on
your server, and then let all clients authenticate against that.

This happens _before_ DHCP takes place.