Domain Security Breach

[Charles]

Domain Security Breach

I was asked to find a software package that would prevent a user from bringing in his home laptop and pluging in into the network and gaining access. Right now the company uses DHCP and no wireless connections, any person can bring in a laptop unplug a computer and plug their laptop into the network. The DHCP will give them an IP address and allow them access to the internet and other items. WE would like to have a program that would prevent computers (that are not on the domain) access to the network. The main objective is to have our DHCP deny them an IP address. We are using Active Directory (Windows 2k) for our DNS and DHCP. if anyone can help please email me at gbecker@transstates.net

[denny]

If you are using AD and running a win2k domain, a laptop might be getting an IP address, but they shouldn't be able to access anything on your network if your domain is set up properly. There should be no guest accounts accepted - and your domain should require network passwords in order to access the network. Further, any computer on the network should be a domain machine. If that is the case - unless you have non-domain servers on the network, they shouldn't be able to access anything.

One of the downfalls of running DHCP on a network is that any computer that plugs in can get an IP address. It is extremely important in a DHCP environment that you lock down access to network resources based on domain groups. This includes your proxy server, which accesses the internet.