RE: [ActiveDir] Getting better control over DHCP

[Marc A. Mapplebeck]

I'm not sure if it's the best way to do it, but you could set your entire scope to be in one exclusion range, then assign static DHCP to authorised MACs. After that, for added security, you could set a second scope to give out leases outside your network range so that unauth ppl will get a lease, but not be able to see anybody, only downside to that would be that the network savvy user could look under network settings and see what the IP of the DHCP server is and then assign a static IP within that range. HTH - Marc From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Edwin Sent: February 3, 2006 20:13 To: ActiveDir@mail.activedir.org Subject: [ActiveDir] Getting better control over DHCP Is it possible within a domain on an authorized DHCP server to restrict what machines get a DHCP IP Address?  For example, I want to prevent someone from bringing in an unauthorized laptop and getting an IP Address on the network.  I want it to be so that if the machine is not a part of the domain, it does not get any network connectivity from the DHCP server.   Thanks, Edwin