Restrict login based on IP

G

Guest

Guest
Archived from groups: microsoft.public.win2000.security (More info?)

Is it possible to restrict login based on the IP address rather than computer
name.
What are the possible work around available ?

--
Vivin
 
G

Guest

Guest
Archived from groups: microsoft.public.win2000.security (More info?)

For Windows 2000/XP Pro/2003 you can use ipsec policies using either filtering with
permit and deny rules or negotiation with AH/ESP to control access by computer IP
address. Domain controllers can not use ipsec negotiation policies with domain member
computers however. See the links below for more info. --- Steve

http://www.securityfocus.com/infocus/1559
http://www.microsoft.com/windows2000/techinfo/planning/security/ipsecsteps.asp

"Vivin George" <VivinGeorge@discussions.microsoft.com> wrote in message
news:DEEE837A-ADA5-4715-AA2C-E2514BD24568@microsoft.com...
> Is it possible to restrict login based on the IP address rather than computer
> name.
> What are the possible work around available ?
>
> --
> Vivin
 
G

Guest

Guest
Archived from groups: microsoft.public.win2000.security (More info?)

Lots of firewalls do that. Ipcop (freeware) will do it although it is
a bit of a PITA to maintain - the restriction, that is. Ipcop itself
is fire and forget.

Peter

On Thu, 9 Sep 2004 03:11:01 -0700, Vivin George
<VivinGeorge@discussions.microsoft.com> wrote:

>Is it possible to restrict login based on the IP address rather than computer
>name.
>What are the possible work around available ?