Re: Help in setting up LAN with Server 2003

From: Jeremy (Nospam_at_nospam.com)
Date: 11/10/03 

Date: Mon, 10 Nov 2003 09:34:48 -0500

There are a number of ways to set that up. If the linksys allows it and has
a filter area to only allow certain MAC addresses you would have to enter
all the MAC addresses for all the workstations and server on your network.
Easier way would use static ip addresses on all the machines and turn of
DHCP that way someone couldn't jack in. Because if you have DHCP anyone can
jack in and get a IP address and be able to surf your network.

Onto your second part. Only way to limit access to the internet is to
install a proxy server on the w2k3 server. Then tell the linksys that only
the ip from the w2k3 server is allowed to access the internet. This would
stop the casual laptop user from jacking in getting a IP address from your
dhcp and having direct access. Same with a user who figures out how to
logon locally to there xp machine instead of the domain. A proxy server
would also keep a log of what pages people went to and allow you to limit
content. I happen to like squid and squid guard on a Linux box but the
choice is yours. For example ours is setup as either restricted or full
access. Under restricted there are only 50 sites our users can get to.
Otherwise they get a nice forbidden screen. Full access is just that they
can go anywhere. Squidguard allows you to filter porn sites etc from even
the full access people. Or have only a list of sites they can access.

Thirdly as far as requiring all the workstations to login you would have to
set local policies and domain policies. grpedit.msc works for local. You
should have everything you need to research to pull off your project.
Mostly because like school I'm not going to do the legwork for you. I don't
get paid for doing your job you do. 

-- 
Jeremy Kettelhohn
<spanks@nc.rr.com> wrote in message
news:e$4nB2wpDHA.2064@TK2MSFTNGP11.phx.gbl...
> Hello,
>
>     To start off with, thank you in advance for anyone who is able to help
> me with this issue.
>
> I am setting up a new LAN and I need advice on accomplishing the following
> things with the hardware I have.
>
> The hardware I have is the following
>
> 1.  Sever running Server 2003 Standard
> 2.  Cable internet access connected to Linksys Firewall/Router/Switch
Combo
> 3.  This is connected to Linksys multiple port switch
> 4.  Server and multiple workstations connected to #3 which is connected to
> #2 (hope not too confusing)
> 5.  20 workstations running XP professional
>
> What I am trying to accomplish is the following
>
> 1. (Already done)  The Linksys Combo device is running as the DHCP server
on
> the LAN and all the computer receive the IP through that device.
> 2.  Each workstation would need to log onto domain (testX.com) with a
> password via the Server to gain access to the workstation and ability to
> have internet access.
>
> 3.  If the incorrect password was entered, the ability to access the
> workstation or internet could not happen.
> 4.  Once logged on the workstation correctly, the user would not have the
> ability to change anything that would later allow them to access the
> workstation and internet without being authenticated by the server.
>
> 5.  No random user with a laptop could plug into a jack (connected to the
> LAN) and have internet access available on the LAN or have any access to
any
> computer or server on the LAN without a username and password provided by
> the LAN administrator.
>
> This is for starters.
>
> Thanks for any help again.
>
>

Relevant Pages

  • RE: ISA 2004 Rules
    ... internet website from the ISA server itself. ... All Users or SBS Internet Users ... Then can you access this problematic page from the workstation side this ...
    (microsoft.public.windows.server.sbs)
  • RE: Routing oddity on domain.
    ... Please give me the Route table of any problematic workstation for analyze. ... I am not sure that is correct as the server has two network cards in it, ... the connection to the internet gets routed between the ...
    (microsoft.public.windows.server.sbs)
  • Re: Trouble integrating existing SBS 2003 server into a home netwo
    ... I did this and the network all worked. ... Every workstation and network printer ... However, there was no internet service at all, including wireless. ... of the router to be in the same IP range as the SBS server. ...
    (microsoft.public.windows.server.sbs)
  • Re: Added second NIC - help!
    ... The reason we introduccd the Linksys VPN router is because we wanted to ... the server so we wanted to isolate the internal network from the ... Microsoft Internet Security & Acceleration Server: ...
    (microsoft.public.windows.server.networking)
  • Re: Administrator rights for legacy appliations
    ... innocent users running workstation applications and browsing the ... Internet and your filesystem. ... applications at all, even if you try to lock them down as best as ... compatible and can cause various problems on your server. ...
    (microsoft.public.windows.terminal_services)