detect when a computer joins the network

detect when a computer joins the network

Secure Home | Search | About
 Microsoft Applications Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
detect when a computer joins the network Matt 01-13-2007
Posted by Matt on January 13, 2007, 8:24 am
If you were  Registered and logged in, you could reply and use other advanced thread options
Some of our employees bring their own laptops to work, and join the
network to connect to the internet. Is it possible to detect (and
maybe prevent) when someone connects a computer (not a member of the
domain) to the network?

Thanks,
Matt


Posted by on January 13, 2007, 11:27 am
If you were  Registered and logged in, you could reply and use other advanced thread options
Check your network switch's documentation. Many Ethernet switches have
security features that block unknown computers from connecting.

J Wolfgang Goerlich

Matt wrote:
> Some of our employees bring their own laptops to work, and join the
> network to connect to the internet. Is it possible to detect (and
> maybe prevent) when someone connects a computer (not a member of the
> domain) to the network?
>
> Thanks,
> Matt


Posted by Lanwench [MVP - Exchange] on January 15, 2007, 12:50 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
> Some of our employees bring their own laptops to work, and join the
> network to connect to the internet. Is it possible to detect (and
> maybe prevent) when someone connects a computer (not a member of the
> domain) to the network?
>
> Thanks,
> Matt

You can prevent users from joining computers to the domain via group
policy -

Security Settings\Local Policies\User Rights Assignment\Add Workstations to
Domain

I also hope your company has a written policy stating that unauthorized
computers are not to be connected to the network at all. Don't keep unused
network jacks at the desktops/on the floor, patched into your switches in
your data/server room or closet.



Posted by Phillip Windell on January 16, 2007, 2:01 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Are you asking about joining to the domain or just plugging into the network
and getting a TCP/IP config?

If it is just them connecting to the LAN, that is a discipline problem and
not a technical problem. That is stopped by company policy, not group
policy. If management won't adopt such a policy and then actually enforce
it,..then you might as well forget it and let them do what they want.

--
Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com

The views expressed are my own (as annoying as they are), and not those of
my employer or anyone else associated with me.
-----------------------------------------------------

> Some of our employees bring their own laptops to work, and join the
> network to connect to the internet. Is it possible to detect (and
> maybe prevent) when someone connects a computer (not a member of the
> domain) to the network?
>
> Thanks,
> Matt
>



Posted by on January 16, 2007, 3:34 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
True. Still, it is always good to back up a corporate policy with a
technical one. I'd enforce it by blocking unknown MAC addresses, if the
switch allows it.

J Wolfgang Goerlich

Phillip Windell wrote:
> Are you asking about joining to the domain or just plugging into the network
> and getting a TCP/IP config?
>
> If it is just them connecting to the LAN, that is a discipline problem and
> not a technical problem. That is stopped by company policy, not group
> policy. If management won't adopt such a policy and then actually enforce
> it,..then you might as well forget it and let them do what they want.
>
> --
> Phillip Windell [MCP, MVP, CCNA]
> www.wandtv.com
>
> The views expressed are my own (as annoying as they are), and not those of
> my employer or anyone else associated with me.


Similar ThreadsPosted
Access computer from the network January 31, 2008, 3:26 pm
Preventing Access to Network Printers by Computer July 11, 2006, 2:54 pm
Hide computer from network browse list June 6, 2007, 9:07 am
Network Computer Games on Business Machines June 15, 2007, 5:51 am
detect account type October 5, 2006, 11:07 am
Keyloggers - does antivirus detect them December 4, 2006, 7:59 pm
How to detect the signature of a file September 2, 2008, 8:29 am
Detect what software is blocking connections January 26, 2006, 11:49 am
Detect cookie additions immediately - How to? February 22, 2006, 9:31 am
Reliable way to detect presence of macros August 24, 2007, 4:52 pm

The site map in XML format XML site map

Contact Us | Privacy Policy