Microsoft Network Problem

[djtech2k]

I have a complex problem and am looking for a way around. My problem is that I have remote users that logon to my network domain. They get on a local network behind our vpn concentrators. So, when they boot up, they get a private 172.x.x.x IP address. They then get put into the vpn concentrator where they are assigned a static REAL IP on my network. It is assigned to the cisco vpn client virtual network adapter. Anyway, my issue is that in many cases these 172 private IP's are registering themselves in my Domain DNS because I have a GPO forcing all clients to dynamically register. What I need is for the adapter (should be cisco virtual) with the statis REAL Ip to register, but the adapter with the private address to NOT register. I have had a few ideas, but none seem to be great of easy to implement.

My first thought was IP filtering on all DC's to block the private IP subnet, but thats more overhead on DC's plus I dont know what it will do with the whole cisco virtual adapter thing.

Then I thought that I could maybe add a WMI filter to my DNS registration GPO so that any adapter with the private subnet would NOT register at all while everything else would.

Is this possible with a GPO/WMI filter or is it something that will have to be done with vbscript as a startup script. I just need to find a solution quick that will be effective.

I am working with some WMI filters now, bit its not working well at all.

Thanks in advance.

 

[djtech2k]

WMI filters do not seem to be working well for me right now. Because the IPAddress field is not a regular string field, the simple WMI WQL filters I can use are not working.

Any ideas?

 

[djtech2k]

For some reason the WQL filters I have tried will not work. Any other ideas?