There are several solutions that address this problem at the networking
level. Quarantine solutions from major network players (Cisco, Nortel,
etc) can let you define a policy that would allow or prevent devices
from accessing network resources. Additional advantages include the
ability to inspect anti-virus and patch levels on the machines before
granting network access as well as defining 'restricted' networks for
devices that only meet partial criteria (valid guest devices only get
Internet access type of thing).

The downside is that these can be somewhat expensive. If you have the
time to wait for the software to release, I would check out Microsoft
Network Access Protection (NAP) which for a Windows DHCP environment
provides a free built in component to the OS that provides similar
functionality. However, it is currently in Beta.

Guy

-----Original Message-----
From: Davy Davidson [mailto:davy_emp (at) hotmail (dot) com [email concealed]]
Sent: Friday, August 25, 2006 12:53 AM
To: focus-ms (at) securityfocus (dot) com [email concealed]
Subject: IP address assignment problem

Hi,
I have a little problem and seek for ur thoughts, let's assume I'm in a
very open environment where everyone can very easily try to get his/her
laptop on the network and IP addresses are assigned by a DHCP server and
we are in a domain environment, how do I prevent machines that are not
part of our domain to be assigned an IP address?

Thanks

_________________________________________________________________
Don't just search. Find. Check out the new MSN Search!
http://search.msn.com/

------------------------------------------------------------------------

---
------------------------------------------------------------------------

---

------------------------------------------------------------------------
---
------------------------------------------------------------------------
---

[ reply ]