Re: DHCP security breach



1. Don't give your user's the right to change their computer names.

2. Use 802.1x or a similar authentication scheme that forces them to
authenticate to the network before they receive an IP address. This will
prevent non-domain computers from getting on your network at all, possibly
with a conflicting name.

Ray

With a little effort, I can hijack any workstation's name.
Any ideas on how to secure DNS updates via DHCP?


.