Windows 2000 Security Issue

[alex0628]

I need to secure the network so only authorized personnel can use it. Right now, anyone can plug into the network and, if they have tcp/ip set up as dynamic on their NIC, can get on the network and use the Internet. They don't have access to the network files, but I can't have them accessing the Internet either. How do I secure the server to block this access?

 

[nsanto17]

Install and configure a proxy Server or firewall....

 

[alex0628]

The Windows 2000 file server is the server that assigns the IP addresses. Is there some way to configure the Windows 2000 server to only allow authorized users access to the Internet and not assign IP addresses to non-authorized users in DNS or DHCP?

 

[Davetoo]

Nope. You would have to setup reservations in DHCP and enter every MAC address of your known systems.

You may be missing a basic physical security issue as well...why do you have ports patched in to your network that aren't used by your current systems?

I'm Certifiable, not certified.
It just means my answers are from experience, not a book.

 

[nsanto17]

Lander,

Thats a very good point and very often overlooked by many Admins.

Nick

 

[alex0628]

I actually don't have unused ports connected. And I have a separate network with a firewall set up for non-employees who need access to the Internet specifically to keep them off the company network. What happened is that someone was in the building and needed Internet access. Instead of coming to me and requesting a connection be made in the office the visitor was in, a manager let him have access from a normal workstation location and let him plug his laptop into the company network. I want to block people from going around me so this doesn't happen again.

 

[Davetoo]

I'd be in contact with the managers boss to have a security discussion with him ASAP.

Assuming you've removed the "Everyone" group from accessing your network, the issue isn't file security as much as it is a virus threat issue.

I'm Certifiable, not certified.
It just means my answers are from experience, not a book.