It looks like you need R2 to get the filters. The callout dll looks like it might work but MS pulled it. I found a place to download it but I'm not sure if I should trust a download from some random guy.
Anyone know why it doesn't work to create a bogus scope? I'm guessing it's because the DHCP server tries to send a response to the client thinking it's in a different subnet when in fact it is in the same subnet as the server. Is there a way to fool it into working? Curt -----Original Message----- From: [email protected] [mailto:[email protected]] On Behalf Of Kurt Buff Sent: Friday, March 14, 2014 4:56 PM To: [email protected] Subject: Re: [NTSysADM] DHCP question I'm not completely sure, as I'm running 2008R2 on my DCs, though we're at a FFL/DFL of 2003 Native, and I have the requisite tab. However, my currently adequate google-fu points me to this: http://blogs.technet.com/b/teamdhcp/archive/2007/10/03/dhcp-server-callout-dll-for-mac-address-based-filtering.aspx Kurt On Fri, Mar 14, 2014 at 4:16 PM, Curt Finley <[email protected]> wrote: > The filtering looks promising but I can't find it. I right-click on IPv4 and > select Properties. It beeps twice and then a window comes up that has tabs > for General, DNS, Network Access Protection and advanced but no Filters. I > assume the beeps are some sort of error indicator. I'm running 2008 Standard > [Version 6.0.6002]. What am I missing? > > Curt > > -----Original Message----- > From: [email protected] > [mailto:[email protected]] On Behalf Of Kurt Buff > Sent: Friday, March 14, 2014 3:53 PM > To: [email protected] > Subject: Re: [NTSysADM] DHCP question > > Deny MAC addresses? > http://technet.microsoft.com/en-us/magazine/ff521761.aspx > > Kurt > > On Fri, Mar 14, 2014 at 3:37 PM, Curt Finley <[email protected]> wrote: >> I have a Windows 2008 server running DHCP. I’ll be kicking the >> remaining XP systems off my network by the end of the month. I’m >> concerned that some of them might wander back in and get reconnected. >> I’d like to set up DHCP so it hands out bogus IP info to these >> systems making it impossible for them to communicate on the network. >> I set up a scope on my DHCP server for a bogus IP range. I then put >> in a reservation for a MAC address in that scope and activate the >> scope. I go to the machine with that MAC address and release the >> address, delete its lease from the server and renew its lease. It >> comes back with a lease from the good IP range instead of the bogus one. Is >> there something I can do to make this procedure work or am I just out of >> luck? >> >> >> >> Thanks for your help. >> >> >> >> Curt > >
