Re: AD will authenticate any machine?

From: Jason Stanley (jstanley@mmm.com)
Date: 12/20/02

  • Next message: chris@nospam.com: "Re: WinXP Pro - Lost admin pwd" 
    From: jstanley@mmm.com (Jason Stanley)
Date: Fri, 20 Dec 2002 14:07:20 -0600

    Getting an ip address is not a function of either NT4 or Active Directory.
    If machines were limited on your network, it wasn't because of the nt4
    domain.
    "J Barkwin" <jbarkwin@yahoo.com> wrote in message
    news:ee51488d.0212181951.497ba651@posting.google.com...
    > Hi. Junior Net Admin question/curiosity...
    >
    > How come our NT 4 domain would not allow a MACHINE to grab an IP
    > address unless it was a member of the domain, but when we upgraded to
    > AD any MACHINE from any domain or workgroup can plug in and get onto
    > the network?
    >
    > I suppose it's not a huge deal because the USER still has to
    > authenticate to get into the resource they want to get into. However,
    > I don't like the idea of anyone bringing strange boxes in and being
    > able to "look around".
    >
    > Is that just the way AD is or do we need to turn some switch on, or...
    > yuch... authenticate by approved MAC address only?

    Opinions expressed here are my own and may not represent those of my employer.

    Relevant Pages

    • Re: AD will authenticate any machine?
      ... > Getting an ip address is not a function of either NT4 or Active Directory. ... > If machines were limited on your network, it wasn't because of the nt4 ... >> authenticate to get into the resource they want to get into. ... authenticate by approved MAC address only? ...
      (comp.os.ms-windows.nt.admin.security)
    • Re: Getting MacBook Pro to authenticate with AD (SBS environment)
      ... notebook off of the network. ... about (meaning getting the laptop to authenticate with AD). ... It seems to happen when Active Directory domain controllers are ... Remove Active Directory from the Authentication path in Directory ...
      (microsoft.public.macintosh.general)
    • Re: ipfw plus authentication (authpf is cool but....)
      ... their ipaddress, mac address, workstation os, etc. in our ldap directory. ... gain network access is indeed belongs to that user. ... router first before being allowed to access any server. ... user will authenticate to a web based login form which is tied up ...
      (freebsd-questions)
    • Re: [opensuse] Results of moving ssh to a high port - Zero scriptkiddies in a 24 hour period.
      ... I would generally prefer the password protected key option (to use the ... key you have to authenticate with a password), ... For gaining access to a specific node in your network, ... It raises the security level drastivally, but at what costs, is it ...
      (SuSE)
    • Re: Printer problems
      ... > This connection fails ... >> printer to NT4, the browser shows the machine name, but doesn't ... >>> We have a network with SBS2k server and NT4 wk/stns. ...
      (microsoft.public.windowsxp.general)