restricting which DHCP server is used

[ouzojd]

Hi, I have a problem where laptop users take home their laptop, plug them into their ADSL routers and copy crap on to them.

Apart from giving them all static IPs, is there a way I can make these laptops only accept leases from our DHCP server here?

Also is there a way to make this work the other way around to stop consultants coming in and connecting their laptops and getting an IP allocated?

We dont have NAC either.

Thanks

 

[theravager]

Try experimenting around with windows firewall depending on what version of service pack you are running. Group policy settings on this should be able to do what you require.

 

[ouzojd]

Cheers, I'll see what I can find.

 

[pgaliardo]

Not sure of your network setup, but as far as consultantants connecting to your network, depending on the the switches you use, you may be able to set port security on the switches so that only the MAC addresses you assign can connect to your switch.

As far as your users and their laptops, if you made them local admins on the laptops, they can probably do what they want. I don't think you can trick DHCP, because it is basically a broadcast that will look for a server and assign an IP address.

 

[lhuegele]

Instead of trying to prevent your users from using their "portable" machines at home (they will always find away around anything you try anyway) why don't you come up with some formal policy that makes sense to the business and the users and work with your HR department to make sure the users understand that their machines should be used for business purposes only?

Good luck,