RE: Deny client from obtaining IP address

["Crawley, Jim" <Jim.Crawley () yrbrands com>]

        In Windows 2000/2003 DHCP, you can add reservations.  This only
works if you know the MAC address of all good clients, and add any new
machines that have been authorised to use the network.

        You could probably script a way to add clients to this list.
Unfortunately my own scripting is sub-par so I can't help out much with
it but it is one thing I shall be pushing for when/if these SOX audits
ever calm down and I get a bit more time on my hands.
 


-----Original Message-----
From: rolando_ruiz () jetaviation com [mailto:rolando_ruiz () jetaviation com]

Sent: Friday, 28 July 2006 2:24 AM
To: security-basics () securityfocus com
Subject: Deny client from obtaining IP address

Hello all,

Is there a way that in DHCP or so, one can deny a client computer from
obtaining an IP address? We use Microsoft servers ADS environment and
I'd like to allow only those we want to obtain
an IP address. I don't want to make it too restricted where authorized
users are unable to connect. I'm sure there are some 3rd party apps that
can handle this and I welcome suggestions on those also. This is a
solution for denying connectivity to outsiders. 

Thank you



------------------------------------------------------------------------
---
This list is sponsored by: Norwich University

EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The NSA has designated Norwich University a center of Academic
Excellence 
in Information Security. Our program offers unparalleled Infosec
management 
education and the case study affords you unmatched consulting
experience. 
Using interactive e-Learning technology, you can earn this esteemed
degree, 
without disrupting your career or home life.

http://www.msia.norwich.edu/secfocus
------------------------------------------------------------------------
---


---------------------------------------------------------------------------
This list is sponsored by: Norwich University

EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The NSA has designated Norwich University a center of Academic Excellence
in Information Security. Our program offers unparalleled Infosec management
education and the case study affords you unmatched consulting experience.
Using interactive e-Learning technology, you can earn this esteemed degree,
without disrupting your career or home life.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------