Re: How to block unauthorized network connections?

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

For a managed switch you will also need a certificate server. Not to mention
a certificate on each user computer.

IAS?RADIUS for fifteen users???

Why go to that trouble and expense such a small 15 user network?

Assign ststic IP's and block the rest.
--
Thanks, Steve


"Steve" wrote:

Use DHCP reservations for all "valid" computers. Use ISA to block all IP
addresses that don't fall into the reservation range from accessing any
server resources or the internet.

"Jeff Teel" <jdteel@RMoveThis sugardog.com> wrote in message
news:uTCwlZpZHHA.3628@xxxxxxxxxxxxxxxxxxxxxxx
Even if he had ISA installed it wouldn't keep someone from using their
personal laptop and browsing the web if they have a domain account on the
SBS. When ISA prompts for a password to access Internet resources they
type their username/password and they are on the web!


"Steve" <newsgroup@xxxxxxxxxx> wrote in message
news:eNyKAIoZHHA.4668@xxxxxxxxxxxxxxxxxxxxxxx
Well easier to do with ISA. I'm not sure how you'd do it with SBS 2003
SE. There may be other more clever folks out there that can help.

"Gregg Hill" <bogus@xxxxxxxxxxx> wrote in message
news:%23Cw0d7mZHHA.4772@xxxxxxxxxxxxxxxxxxxxxxx
The client in question wants to install SBS, but does not want Premium.
I want to stop the rogue laptops or APs from even getting a DHCP
assigned address. I could do that with the managed switch at an old
client.

No, the laptop is not on the domain in this case. It is just a worker
bringing in his own system, but he does have a domain account for his
desktop. Fifteen total workstations on an NT4 domain.

Gregg Hill




"Steve" <newsgroup@xxxxxxxxxx> wrote in message
news:%2375SOKmZHHA.1400@xxxxxxxxxxxxxxxxxxxxxxx
Do you have PE with ISA 2004 installed? How many total client computers
are there that are "authorized" to have access? Do these laptop users
have valid accounts to login to the SBS?

"Gregg Hill" <bogus@xxxxxxxxxxx> wrote in message
news:OJi5zBlZHHA.4220@xxxxxxxxxxxxxxxxxxxxxxx
Hello!

Many moons ago I managed an NT4 domain that had a managed switch on it
and I could use that switch to enter the MAC addresses of systems
allowed to connect to the network.

Now I have a new client who wants to use SBS 2003 R2 and he has a
problem with people bringing in a laptop and slapping it on the
network. Shy of beating those users to death, is there a way within
SBS to only allow network connections, i.e., DHCP addresses, from
being handed out to anything but approved systems?

I would like to prevent the occasional person who pops his own AP on
the network to connect a laptop, or who just plugs in the laptop or
other system. I know I can use a managed switch, but I am wondering if
SBS has any native feature to do it.

Thank you for your help!

Gregg Hill












.

Relevant Pages

  • Re: Is there a Dummies guide to SBS and laptop users??
    ... Thanks for using the SBS newsgroup! ... In this way you need setup the SBS server box as the VPN server, ... Private Network or the Internet in Windows Server 2003 ... >Subject: Re: Is there a Dummies guide to SBS and laptop users?? ...
    (microsoft.public.windows.server.sbs)
  • Re: Cannot access server shares
    ... There is no indication of a network ... folders listed when I query the server shares from the laptop (i.e. ... Both machines have private IPs ...103 for the server and .22 for the ... SBS is wired to the router. ...
    (microsoft.public.windows.server.sbs)
  • RE: SBS Netwk Config Wizard fails.
    ... Confirm TCP/IP settings of client computer network adapter. ... Verify that the preferred DNS is pointing to the SBS server. ... Try to connect this laptop with SBS Server by using wired cable line, ...
    (microsoft.public.windows.server.sbs)
  • Re: How to block unauthorized network connections?
    ... I think the managed switch is the best solution overall. ... At least I know that SBS cannot do it ... You only have 15 users on the network. ... the laptop is not on the domain in this case. ...
    (microsoft.public.windows.server.sbs)
  • Re: working but no access to local resources
    ... The IP address of the local adapter on the laptop is in the same subnet as the LAN IP subnet for the SBS network ... Yes this was from a laptop. ... Ethernet adapter Local Area Connection: ...
    (microsoft.public.windows.server.sbs)