+ Post New Thread
Results 1 to 8 of 8
Windows Thread, how to do dhcp and isaserver in Technical; i had an idea on how you can control internet access when using DHCP. it's sort of an extension to ...
  1. #1
    browolf's Avatar
    Join Date
    Jun 2005
    Location
    Mars
    Posts
    1,524
    Thank Post
    106
    Thanked 88 Times in 74 Posts
    Blog Entries
    46
    Rep Power
    40

    how to do dhcp and isaserver

    i had an idea on how you can control internet access when using DHCP. it's sort of an extension to the scripts i've written for controlling our own access in isa 2004. we only use dhcp on laptops.

    make a hidden share on the isaserver, say logs$
    in the login script make a line:
    ipconfig | find "IP Address" > \\isaproxy\logs$\%computername%.txt

    this will mean everytime someone logs on a file will be created containing the ip address. unfortunately what i've thought up isnt foolproof and will own work if the class is logged on.

    basically combine the room management script i made in the scripts forum with the individual pc management.

    i.e.

    when you turn a room on, the script will have to add machines to a computerset dynamically before the computerset is added to the rule. You can find the machine names from the names of the log files if you use standard prefixes for machinenames. and then go thru the list and get the ipaddresses. add the computers to the set and add the set to the rule. it's a bit of a nightmare tbh and you could never do it manually. but asfaras i can see it's the only way. it could be made a bit easier if you can interrogate the dns server thru vbscript. it would be more foolproof then and no need to bother about log files. i expect it's possible somehow but i dont know.

  2. #2
    ChrisH's Avatar
    Join Date
    Jun 2005
    Location
    East Lancs
    Posts
    4,999
    Thank Post
    120
    Thanked 280 Times in 258 Posts
    Rep Power
    106

    Re: how to do dhcp and isaserver

    This sounds like a lot of faffing! ISA doesnt work with DHCP? This doesnt sound good at all.

  3. #3
    browolf's Avatar
    Join Date
    Jun 2005
    Location
    Mars
    Posts
    1,524
    Thank Post
    106
    Thanked 88 Times in 74 Posts
    Blog Entries
    46
    Rep Power
    40

    Re: how to do dhcp and isaserver

    i dont know about isa 2000 but in 2004 access on a per computer basis is purely based on ipaddress. which obviously wouldnt work with dhcp :-\

  4. #4
    ChrisH's Avatar
    Join Date
    Jun 2005
    Location
    East Lancs
    Posts
    4,999
    Thank Post
    120
    Thanked 280 Times in 258 Posts
    Rep Power
    106

    Re: how to do dhcp and isaserver

    That sounds awful! Surely it should work of MAC address if they are not keen on host names etc.

  5. #5
    browolf's Avatar
    Join Date
    Jun 2005
    Location
    Mars
    Posts
    1,524
    Thank Post
    106
    Thanked 88 Times in 74 Posts
    Blog Entries
    46
    Rep Power
    40

    Re: how to do dhcp and isaserver

    not as far as I can see. a computer set can contain either, a computer ip address, an ip range or a subnet.

    our uncatered scenario is surely shortsightedness on the part of microsoft.

    on the other hand if someone clever could make a plugin for isa that allowed easy room management a vast amount of money could be made

  6. #6
    mark's Avatar
    Join Date
    Jun 2005
    Posts
    3,958
    Thank Post
    248
    Thanked 49 Times in 45 Posts
    Blog Entries
    2
    Rep Power
    46

    Re: how to do dhcp and isaserver

    Maybe this should be it's own thread. But then it's a bit obscure... [mods - feel free to move me ]

    Does anyone use loopback processing?

    In case you don't know - designed for school locations where users typically can logon to any number of PC's - loopback processing allows your user to have the policies of many OU's apply to a user - OU's in seperate OU trees - so you can apply policies by user object AND computer object. In this way I redirect a start menu dependant on the room users log in to.

    I presume this method could be used to deny Internet Access per room in the same way - by nobbling the proxy settings in the room OU policy??

  7. #7

    Geoff's Avatar
    Join Date
    Jun 2005
    Location
    Fylde, Lancs, UK.
    Posts
    11,803
    Thank Post
    110
    Thanked 583 Times in 504 Posts
    Blog Entries
    1
    Rep Power
    224

    Re: how to do dhcp and isaserver

    Problem with that is that any changes take a while to get done. You couldn't for example, have a room with internet access and be sure that it wouldn't next lesson. This is because it takes up to 90 minutes for changes in GPO's to propagate. If you reduce that time limit, you'll trash your network.

    The ideal solution needs to be instant on/off and operable by a teacher.

  8. #8
    ChrisH's Avatar
    Join Date
    Jun 2005
    Location
    East Lancs
    Posts
    4,999
    Thank Post
    120
    Thanked 280 Times in 258 Posts
    Rep Power
    106

    Re: how to do dhcp and isaserver

    I agree with Geoff Loppback policys especially I find are a little flakey when it comes to making changes. They are good for permanent stuff though.
    You can use Lanvie or something to turn the Internet off for a room or get machine lists together and use psexec to write a dummy proxy in while they are logged on.

SHARE:
+ Post New Thread

Similar Threads

  1. MAC OSX NOT GETTING IP FROM DHCP
    By thegrassisgreener in forum Mac
    Replies: 4
    Last Post: 18th January 2008, 08:50 AM
  2. Virtual PC and using DHCP
    By Kyle in forum Thin Client and Virtual Machines
    Replies: 2
    Last Post: 7th March 2007, 11:46 PM
  3. AD Subnets and DHCP
    By Gatt in forum Wireless Networks
    Replies: 9
    Last Post: 2nd March 2007, 11:22 AM
  4. VPN +DHCP
    By Dos_Box in forum Wireless Networks
    Replies: 7
    Last Post: 30th September 2005, 01:14 AM
  5. DHCP
    By kingswood in forum Wireless Networks
    Replies: 10
    Last Post: 7th September 2005, 06:29 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •