UNRESTRICTED DHCP

[rstitzel]

I have a Windows 2000 server that runs DHCP. If ANY computer attaches itself to the network this server will give them an IP address. Is there a way to only allow domain computers to get IP address from this server? Or a way to block a specific computer name or mac address from getting an address?

Thanks

 

[ADB100]

You can hard-code all MAC addresses in the DHCP server with reservations and exclude all other addresses in the DHCP scope. The problem with this is its not really manageable on anything other than a small scale - multiple DHCP servers each with hard-coded DHCP Scopes etc. If I had 1 site with less than 100 devices and a single DHCP Server then I would maybe consider this if I was concerned with security, anything more than that and I would look at alternatives (or not even bother).

802.1x EAPoL is a good alternative especially in an Active Directory environment as you can automate everything. You would require 802.1x capable Ethernet access switches though.

HTH

Andy