asked on 7/13/2021

How to add alerts to a domain notifying admin(s) of new computers or devices that log onto the network

Hello - looking for knowledge on how to add alerts to a domain notifying admin(s) of new computers or devices that log onto the network, so that we know when new computers are connecting to the network? is there anything that Windows Server or 3rd party software might provide in the way of those types of security alerts?

Thanks,
Damian

Windows Server 2016 Windows OS Networking Security Windows 10

Last Comment

Damian Gardner

7/14/2021

Scott Silva

7/13/2021

That is why we usually set up domains. That way we control who connects to the network. Guests are kept separated...

ASKER CERTIFIED SOLUTION

Robert

7/13/2021

THIS SOLUTION IS ONLY AVAILABLE TO MEMBERS.

View this solution by signing up for a free trial.

Members can start a 7-Day free trial and enjoy unlimited access to the platform.

See Pricing Options

Start Free Trial

Damian Gardner

7/13/2021

ASKER

Thanks for your input guys. Reason we're looking for monitoring alerts, is it was suggested by a professional security auditor who audited our network. one of his suggestions was to "setup some type of alert notifications to let us know when foreign devices/computers join our network". so in other words - a hacker connects to the domain and without any type of alert, we may not realize it for days or weeks. anything along those lines you've heard of?

Thanks again

Scott Silva

7/13/2021

I would think a "professional security auditor" could tell you what was available that does that instead of telling you "should" without even knowing if it is possible...
Yes it is possible, but you will need managed switches and 802.1x port authentication, or as was said before MAC address filtering... If a hacker gets into your network it is either poorly designed, or he is skilled enough to remove most traces of being there...

Damian Gardner

7/13/2021

ASKER

Ok - thanks Scott. The way you phrase your responses makes me not want to ask any more questions.

Thanks again.

Damian Gardner

7/13/2021

ASKER

Robert,

Thanks for your help.

Scott Silva

7/13/2021

What I was trying to say is that the auditor should have some suggestions of software that might be available before telling you to try to do something that MIGHT not be available, but leaves a negative mark on your audit reports...

kevinhsieh

7/14/2021

I disagree with the best answer. The easiest way is NOT MAC address filtering, unless you have a very small network. Far easier IMHO to setup 802.1x access controls on the switches, so that only devices that are members of the domain get access. You have to do some initial work setting up internal PKI and group policies, and configure switch ports, but once that's done, there is zero ongoing maintenance. It works for networks of 20 domain members, and 20,000.

Damian Gardner

7/14/2021

ASKER

Duly noted - thanks Kevin.