and, in the future, NAP.
~Brian
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Dean Wells
Sent: Saturday, February 04, 2006 9:34 AM
To: Send - AD mailing list
Subject: RE: [ActiveDir] Getting better control over DHCP
Nod, thanks for the confirmation ... I
: [ActiveDir] Getting better control over DHCP
Nod, thanks for the confirmation ... I stand corrected Susan.
Out of interested Brian, what do you use for wireless? I'm certain it
required a cert. that I couldn't obtain since that in turn required domain
membership?
As to the original question
Sent: Saturday, February 04, 2006 12:01 AM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Getting better control over DHCP
At Microsoft we do not use 802.1x, so if you were to walk up to a port on
our corporate network and plug in, you would get an IP and have access to
some things.
What
IT-Original Message-From: [EMAIL PROTECTED][mailto:
[EMAIL PROTECTED]] On Behalf Of Dean WellsSent: Friday, February 03, 2006 7:19 PMTo: Send - AD mailing listSubject: RE: [ActiveDir] Getting better control over DHCP
Microsoft uses 802.1x auth. I believe ... as do many.--Dean WellsMSEtechnology* Email
@mail.activedir.org
Subject: Re: [ActiveDir] Getting
better control over DHCP
Edwin, I'm sure you've noticed by now but joe and
Brian (both) have given you a really good idea of what you need to do to solve
this. As indicated, to achieve your goal of preventing any unauthorized
access to the network
PROTECTED]
|[mailto:[EMAIL PROTECTED] On Behalf Of Brian Puhl
|Sent: Saturday, February 04, 2006 6:01 AM
|To: ActiveDir@mail.activedir.org
|Subject: RE: [ActiveDir] Getting better control over DHCP
|
|At Microsoft we do not use 802.1x, so if you were to walk up
|to a port on our corporate network
question could be more
easily answered.
Thank you again everyone.
Edwin
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Al Garrett
Sent: Saturday, February 04, 2006
9:55 AM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Getting
better control over DHCP
Is it possible within a domain on an authorized DHCP server
to restrict what machines get a DHCP IP Address? For example, I want to
prevent someone from bringing in an unauthorized laptop and getting an IP
Address on the network. I want it to be so that if the machine is not a part
of the
Of
EdwinSent: February 3, 2006 20:13To:
ActiveDir@mail.activedir.orgSubject: [ActiveDir] Getting better
control over DHCP
Is it possible within a domain on an
authorized DHCP server to restrict what machines get a DHCP IP Address?
For example, I want to prevent someone from bringing
concrete solution.
But thank you very much for your reply.
Edwi
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Marc A. Mapplebeck
Sent: Friday, February 03, 2006
7:38 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Getting
better control over DHCP
I'm
Of
EdwinSent: February 3, 2006 20:55To:
ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Getting better
control over DHCP
Assigning IPs based
off of MAC addresses would be a huge headache! Besides, just as you said
the network savvy person can easily find out the IP range if needed and assign
] [mailto:[EMAIL PROTECTED] On Behalf Of Edwin
Sent: Friday, February 03, 2006
7:13 PM
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir] Getting
better control over DHCP
Is it possible within a domain on an authorized DHCP server
to restrict what machines get a DHCP IP Address? For example, I
--
O'Reilly Active Directory Third Edition - http://www.joeware.net/win/ad3e.htm
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
EdwinSent: Friday, February 03, 2006 7:55 PMTo:
ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Getting better
control over DHCP
Assigning IPs
/ad3e.htm
*From:* [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] *On Behalf Of *Edwin
*Sent:* Friday, February 03, 2006 7:55 PM
*To:* ActiveDir@mail.activedir.org
*Subject:* RE: [ActiveDir] Getting better control over DHCP
PROTECTED] On Behalf Of Susan Bradley, CPA
aka Ebitz - SBS Rocks [MVP]
Sent: Friday, February 03, 2006 8:42 PM
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] Getting better control over DHCP
Can't this be done with ...what is MS using? Is it Ipsec and smartcard
authentication?
You go
Server Administrator
Texas Christian University
(817) 257-6971
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of joe
Sent: Friday, February 03, 2006
7:37 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Getting
better control over DHCP
There is nothing you
03, 2006 8:42 PM
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] Getting better control over DHCP
Can't this be done with ...what is MS using? Is it Ipsec and smartcard
authentication?
You go to Redmond, stick in a rj45 and unless you have a lovely plastic
thingy with a chip you don't
@mail.activedir.org
*Subject:* RE: [ActiveDir] Getting better control over DHCP
I'm not sure if it's the best way to do it, but you could set your
entire scope to be in one exclusion range, then assign static DHCP to
authorised MACs. After that, for added security, you could set a
second scope
Bradley, CPA
aka Ebitz - SBS Rocks [MVP]
Sent: Friday, February 03, 2006 8:42 PM
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] Getting better control over DHCP
Can't this be done with ...what is MS using? Is it Ipsec and smartcard
authentication?
You go to Redmond, stick in a rj45
Title: Re: [ActiveDir] Getting better control over DHCP
I was under the impression it
was 802.1x. Your certificate is stored on the smartcard.
Cheers
Ken
From: [EMAIL PROTECTED] on
behalf of Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]Sent: Sat
2/4/2006 2:25 PMTo: ActiveDir
of Susan Bradley,
CPA aka Ebitz - SBS Rocks [MVP]
*Sent:* Sat 2/4/2006 2:25 PM
*To:* ActiveDir@mail.activedir.org
*Subject:* Re: [ActiveDir] Getting better control over DHCP
Actually I don't think it was as there's a security issue with 802.1x
wired connections.. (wireless no, wired there's an issue
:* Sat 2/4/2006 2:25 PM
*To:* ActiveDir@mail.activedir.org
*Subject:* Re: [ActiveDir] Getting better control over DHCP
Actually I don't think it was as there's a security issue with 802.1x
wired connections.. (wireless no, wired there's an issue that Slav and
Steve Riley have discussed)
Let me get
:[EMAIL PROTECTED] On Behalf Of Dean Wells
Sent: Friday, February 03, 2006 7:19 PM
To: Send - AD mailing list
Subject: RE: [ActiveDir] Getting better control over DHCP
Microsoft uses 802.1x auth. I believe ... as do many.
--
Dean Wells
MSEtechnology
* Email: [EMAIL PROTECTED]
http
23 matches
Mail list logo
