Re: deny a computer from opbtaining IP

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

I was going to create a new scope with a fake range of IPs, but was afraid
that DHCP would confuse and tought it would distribute to good computers. I
guess as long as I don't put any range to "Address Pool" I don't have to
worry about DHCP assigning those fake addresses, right
(new to this)
MC


"Herb Martin" <news@xxxxxxxxxxxxxx> wrote in message
news:%23fZ8FZ40GHA.4688@xxxxxxxxxxxxxxxxxxxxxxx
"CAMC1" <webmaster@xxxxxxxxxxxx> wrote in message
news:u%231wTC40GHA.1300@xxxxxxxxxxxxxxxxxxxxxxx
I know the Mac Address, when I try to add reservation with an odd IP
address
I get error message "The specified DHCP client is not a reserved client"
whatever it means.

Sorry, I left out the details since I wasn't even sure
that you would use this suggestion (and you might
have known how to do it <grin>).

Create another SCOPE, use the range of "bad" addresses
you wish.

Add the reservation to this phony scope.

Create a Superscope*, and add both the real scope and the
phony scope to it.

*Superscope is misnamed (Microsoft didn't do it this is a
standard term): Superscope should be called a ScopeGroup.
It allows the DHCP server to understand that the SuperScopeGrouped
addresses can be given out through the same NIC.

In fact, I teach my students to always append the word "group"
onto this term so that they will forever remember the purpose of
Superscope(groups).

[Similarly, we do this with "Site Link Bridge" (groups) which are
really just Groups of SiteLinks that are transitively linked (by
the KCC automatically.)]


--
Herb Martin, MCSE, MVP
Accelerated MCSE
http://www.LearnQuick.Com
[phone number on web site]


MC

"Herb Martin" <news@xxxxxxxxxxxxxx> wrote in message
news:eprUrz10GHA.1588@xxxxxxxxxxxxxxxxxxxxxxx
"CAMC1" <webmaster@xxxxxxxxxxxx> wrote in message
news:O2LiR700GHA.3716@xxxxxxxxxxxxxxxxxxxxxxx
How can make my DHCP to deny IP address to a PC on my LAN?

You cannot do that exactly. DHCP is without authentication
or security features.

Do you know the MAC address of the offending PC? (If not,
how else would you identify this machine?)

You can use the MAC address to setup a RESERVERATION for
the machine which MAKES no sense....

Give it an address that is worthless, with a phony default gateway,
DNS, and WINS server etc.

--
Herb Martin, MCSE, MVP
Accelerated MCSE
http://www.LearnQuick.Com
[phone number on web site]








.

Relevant Pages

  • Re: dhcp vendor classes option
    ... 172.16.16.0/21 first scope for computers ... To have your get a DHCP address AND have them in their own VLAN, ... that points DHCP requests to a DHCP server. ... your phones asking for a resource that is located on the Internet?... ...
    (microsoft.public.windows.server.networking)
  • Re: No DHCP Leases Available - SBS2K3
    ... delete scope 192.168.1.240 dhcpfullforce (command ... scope with two suggested options; stopped DHCP service; ran CEICW again - ... same message as above; started DHCP service; opened Change Server IP Address ...
    (microsoft.public.windows.server.sbs)
  • Re: DHCP Not releasing on different subnets
    ... Get rid of the Superscope. ... Run a separate scope for each subnet. ... I believe they are also used when multiple subnets run on the same ... > DHCP work over the router at every location no problem. ...
    (microsoft.public.windows.server.networking)
  • Re: SBS Reinstall
    ... In DHCP when I select the server it shows 192.168.16.2 and when I expand it ... "The wizard cannot set the DHCP scope options" error message when you run ... Ethernet adapter local area connection: ...
    (microsoft.public.windows.server.sbs)
  • Re: Decommissioning Windows 2003 DC with a new Windows 2003 Enterp
    ... The recommendation for DHCP is a superscope. ... Disable (exclude) the old ... scope. ...
    (microsoft.public.windows.server.active_directory)