How do I prohibit unauthorized computers in our network / prevent getting IP

Posted on 2010-01-13
Medium Priority
Last Modified: 2012-05-08
We need to secure our internal network so that unauthorized (non company) computers cannot connect to Internet / Shares / etc. Is there a way to do this in Windows Small Business 2008 server?
Question by:Agrippa
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions

Expert Comment

ID: 26303209
Setup a seperate vlan on your router for a guest network.

Author Comment

ID: 26303248
But how does that prevent the new computer from getting an IP from the already existing LAN? The "intruder" patches his / her laptop on a free ethernet socket and receives IP settings. That is what we need to prevent.

Expert Comment

ID: 26303842
you'd need some sort of dynamic vlaning dhcp software. It would allow access to internal network resources only to mac addresses on your vlan allowed list, and either deny, or just internet to everything not on your allowed list.

this is alot of management, and not easily implimented. good luck
Four New Appliances. Same Industry-leading Speeds.

But don't take it from us.  The Firebox M370 is Miercom tested and Miercom approved, outperforming its competitors for stateless and stateful traffic throughput scenarios.  Learn more about the M370, M470, M570 and M670 and find the right solution for your organization today!


Expert Comment

ID: 26304004
You could always just set up an audit log and then have you notified through email.


Author Comment

ID: 26304368
I thought there would be a more simple solution in the standard options of the MS SBS server software. Ik have called with some IT friends of mine and they suggested reserving IP adresses on the DHCP scope OR allowing only verified MAC adresses on the network switch (manageable switch).

Maybe someone has other suggestions?

Expert Comment

ID: 26305232
setup a dhcp server
and share ips just among trusted  mac address.

all macs out of your list wont get conneceted to your networl

Author Comment

ID: 26305463
Hello Nickt25,

is there somewhere a special feature to make a list of trusted macs?

Accepted Solution

nickt25 earned 2000 total points
ID: 26305561
create a reservation for an individual MAC address have to be manually
if you have an small organization.
is  a good solution.
and if is a a big organization will be a lot of work do this manually
is the only way i can think at this moment.
i dont know at this point any 3 party software that make this for you

Featured Post

Free Tool: Path Explorer

An intuitive utility to help find the CSS path to UI elements on a webpage. These paths are used frequently in a variety of front-end development and QA automation tasks.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Make the most of your online learning experience.
If you're a modern-day technology professional, you may be wondering if certifications are really necessary. They are. Here's why.
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, Just open a new email message.  In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…
The Email Laundry PDF encryption service allows companies to send confidential encrypted  emails to anybody. The PDF document can also contain attachments that are embedded in the encrypted PDF. The password is randomly generated by The Email Laundr…

764 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question