Blackberry connected to domain?

[mattrobson]

Hi everyone,

 

I've been lurking for a while now and find this an incredibly useful resource for IT related problems I come across in school. But now I've come across something I'm unsure about.

 

I've been busy reserving IP add's in DHCP for Printers recently and noticed something that's confusing me.

 

It would appear that a Blackberry is connected to our Curriculum domain. No-one in school except the IT department has the wep codes for the wireless networks though.

 

Here's a screen shot to clarify what I'm on about.

 

http://img687.imageshack.us/img687/1168/dhcpcropped.png

 

Anyone got any thoughts what's going on with this?

 

I deleted it yesterday and it's appeared again today.

 

Thanks - a confused IT technician!

 

 

 

Edit - posted this in the wrong forum. Please could it be moved to the normal Network folder? Great start!

Edited November 12, 2009 by mattrobson

[saihaynes]

Hi everyone,

 

I've been lurking for a while now and find this an incredibly useful resource for IT related problems I come across in school. But now I've come across something I'm unsure about.

 

I've been busy reserving IP add's in DHCP for Printers recently and noticed something that's confusing me.

 

It would appear that a Blackberry is connected to our Curriculum domain. No-one in school except the IT department has the wep codes for the wireless networks though.

 

Here's a screen shot to clarify what I'm on about.

 

http://img687.imageshack.us/img687/1168/dhcpcropped.png

 

Anyone got any thoughts what's going on with this?

 

I deleted it yesterday and it's appeared again today.

 

Thanks - a confused IT technician!

 

 

 

Edit - posted this in the wrong forum. Please could it be moved to the normal Network folder? Great start!

 

 

Hi,

Could be a couple of things;

 

1. Someone in IT dept has given out the key to a member of staff or student

 

2. If the key is stored on a staff laptop it wouldnt be hard to get hold off, staff in my experience are often guilty of leaving kids in a classroom and their laptops unlocked.

 

3. Its WEP, We cracked our old school WEP network in about 30mins using Kismac to show SMT that the wireless was due an upgrade.

 

Hope this helps

 

S

[m25man]

For starters,

Take the MAC address and give the device a reservation.

Set up reservation specific options so that the DNS and Gateway points to the BB itself along with any other options that may generally screw the device up.

That should at least dead end him until you have a chance to track him down.

 

The WiFi client must have been fully associated to the AP in order to make a DHCP request so they must know your WEP or WPA keys.

So, Blacklist the MAC address in your WiFi AP's ACL list.

[mattrobson]

No-one in IT would have given out WEP codes, but possible that someone came into our room and picked up some paper with them on.

 

We're going to look into upgrading to WPA with complete new keys when we're not so busy.

 

In the mean time i've reserved the device an address and pointed it back on itself.

 

That should slow the person down while I get busy accessing the AP to block the address completely.

 

Many thanks for all your suggestions!