internet connection without joining domain

[LeonBar]

I have a scenario, Domain with 30 users active directory running. We have a DSL account for Internet access. I was asked to supply Internet access for a user who has a laptop but the user can’t have access to any other part of the network except Internet. I think I can do that by giving them an IP address Subnet and DNS numbers the computer will surf the Internet without joining the domain. The question is if the laptop has a virus on it will it or could that virus find its way to attack any of the computers on the LAN even though the computer is not connected to the domain?

thanks
Leon

 

[packdragon]

If that computer is behind your firewall where your other computers are hiding, then yes a virus could be spread. You can help mitigate this threat by making it a policy that every mobile user who connects to your network (whether or not they connect to the domain) is up to date with their security patches, and have a virus scanner with up to date definitions on it.

If for some reason some mobile users are "above policy" (sometimes the IT guys just can't have their way, even if it's the best way), then you'll want to stay on top of all the servers that you DO control. Keep them up to date!

- Zoe, that's ZOH-EEE, get it right please
- Just a little ol' MCP at Solien Technology
-

http://www.solien.com

 

[LeonBar]

Thanks for the info. After considering what you said and the fact this is a Police Dep. The mobile user will have to make other arrangements to get Internet connectivity. I am not going to connect this machine to our network.

Leon