I have Small network contain 100 pc and 1 server with windows server 2003 and ISA server 2003
the question"
I need any solution allow me to restrict network clients thru MAC addresses
and didn't give any access to any MAC address doesn't detected before
i'm tryed the DHCP but it's not effective because , when i make revesation and restrict the ip with mac adress
it's work fine but if the client mac address doesn't in reversation list it give him rendom ip.
second proplem when u use DHCP the clients can write the ip manually without using DHCP
and this will make conflict in ip address
please any one provide me with effective solution allow me to give the internet only for users listed in mac address list
i can change anything in my network and if i should change the server from windows server 2003 to linux or freebsd
i haven't any proplem.
This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.
Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.
If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.
Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.
Save solutions to your questions, answers you’ve discovered through searching plus helpful articles in your personal knowledgebase for easy future access.
Access the answers to your technology questions today.
30-day free trial. Register in 60 seconds.
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.
Try it out and discover for yourself.
30-day free trial. Register in 60 seconds.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
yes you can do that or go into each machine and remove them from the machines administrators group or what most people call local admin's group and make them just a user. this will not allow them to change their ip as well
to do the last one, login as the administrator and not the user, right click my computer and left click manage. expand local users and groups. double click on administrators group and remove the user thus making them just a limited user. log off and login as that user. this will not allow them to change their ip address as well as restrict a few other thing you prolly don't want them doing anyways.
The best solution depends on what you're trying to do:
1 - If you want to protect all your other computers from these MAC addressed computers, but have no control over when or where these MAC addresses plug into the network, you may have to consider 802.1X security in your network switches. This is not a perfect solution for various reasons, but may be reasonably close.
2 - If you have control over which network port these computers connect to, and you only want access to the Internet from these computers, I would create a new VLAN on your network switches and configure the network ports for these computers to be on a separate VLAN from your "internal" network. You can either have a router with an ACL to use the current Internet connection for both VLANs, or get a cheap Internet connection and firewall and put that on the same VLAN as the segregated hosts.
3 - If you don't care about hacking, viruses, or causing harm to your servers and other computers from these MACs because you control them tightly, you can have users logon with local user accounts, or unprivileged user accounts so they can't access anything else on your domain.
Business Accounts
Answer for Membership
by: jhancePosted on 2006-08-29 at 07:34:55ID: 17412149
Have you look at implementing IPSEC and/or IEEE 802.1X? Either will permit you to control access to the server.