Re: AD will authenticate any machine?

From: J Barkwin (jbarkwin@yahoo.com)
Date: 12/27/02

  • Next message: R Siffredi: "Biometric login to machine" 
    From: jbarkwin@yahoo.com (J Barkwin)
Date: 27 Dec 2002 09:37:36 -0800

    Thanks Jason.

    So the answer lies in a config setting in AD's DHCP services?

    Do you know if there a way to constrict a MACHINE from getting an IP
    address unless it is a member of the AD domain? ...or is there a
    better, "best practice" method ?(without restricting by MAC address)

    -James

    jstanley@mmm.com (Jason Stanley) wrote in message news:<atvt9q$83p$1@tuvok3.mmm.com>...
    > Getting an ip address is not a function of either NT4 or Active Directory.
    > If machines were limited on your network, it wasn't because of the nt4
    > domain.
    > "J Barkwin" <jbarkwin@yahoo.com> wrote in message
    > news:ee51488d.0212181951.497ba651@posting.google.com...
    > > Hi. Junior Net Admin question/curiosity...
    > >
    > > How come our NT 4 domain would not allow a MACHINE to grab an IP
    > > address unless it was a member of the domain, but when we upgraded to
    > > AD any MACHINE from any domain or workgroup can plug in and get onto
    > > the network?
    > >
    > > I suppose it's not a huge deal because the USER still has to
    > > authenticate to get into the resource they want to get into. However,
    > > I don't like the idea of anyone bringing strange boxes in and being
    > > able to "look around".
    > >
    > > Is that just the way AD is or do we need to turn some switch on, or...
    > > yuch... authenticate by approved MAC address only?
    >
    >
    >
    >
    > Opinions expressed here are my own and may not represent those of my employer.

    Relevant Pages

    • Re: AD will authenticate any machine?
      ... Getting an ip address is not a function of either NT4 or Active Directory. ... If machines were limited on your network, it wasn't because of the nt4 ... > authenticate to get into the resource they want to get into. ...
      (comp.os.ms-windows.nt.admin.security)
    • Re: Working around a firewalled network to allow wireless access...
      ... > I can manually set my IP and MAC address on my airport express. ... what is required is that each time I connect to the network I ... what you'd need is either some kind of computer that could authenticate ...
      (uk.comp.sys.mac)
    • TidBITS#794/29-Aug-05
      ... This week's issue brings a potpourri of Mac news, ... Mark Anbinder looks briefly at Google Talk, ... Adding Tiger's AirPort Preferred Network List ...
      (comp.sys.mac.digest)
    • Re: ipfw plus authentication (authpf is cool but....)
      ... their ipaddress, mac address, workstation os, etc. in our ldap directory. ... gain network access is indeed belongs to that user. ... router first before being allowed to access any server. ... user will authenticate to a web based login form which is tied up ...
      (freebsd-questions)
    • Apples new software may steal the show
      ... Steve Jobs, Apple Computer's co-founder and performer in chief, rarely shows any reluctance to sell -- or even over-sell -- his company's accomplishments. ... Jobs spent only about five minutes talking about what I see as the big news of the day: Apple's first software for using a home network through a television screen rather than a computer monitor. ... Apple's Mac OS X, the software running all its Macintosh computers, also has built-in features for easily connecting Macs in a network. ...
      (comp.sys.mac.advocacy)