From: Depp, Dennis M. (deppdmornl.gov)
Date: Wed Dec 21 2005 - 08:45:17 CST

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

There are DHCP products that require authentication prior to giving out
a DHCP address and these can be linked to AD. This can be setup to
require a user to authenticate before the first IP address is handed
out. During the renewals you might be able to use the Machine
authentication to renew an IP address.

Dennis

-----Original Message-----
From: Murad Talukdar [mailto:talukdar_msubway.com]
Sent: Tuesday, December 20, 2005 9:00 PM
To: focus-mssecurityfocus.com
Subject: prevent DHCP server giving out leases to non-domain machines?

Hi,
Is there a way to stop a W2003 DHCP server from giving out leases for
IP's
if a machine does not belong to the domain?
Or is this a fruitless question that someone simply needs to point out
something very simple to me.

A machine can't join the domain if it doesn't have an IP first(chicken
and
egg type thing) I can see that but obviously I'm missing something
here-perhaps it's a question of layers-the domain is working at a
'higher'
layer?
Kind Regards
Murad Talukdar

------------------------------------------------------------------------
---
------------------------------------------------------------------------
---

---------------------------------------------------------------------------
---------------------------------------------------------------------------

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]