Access control in Active Directory GPOs when IP addresses change dynamically.

test29998411 281 Reputation points
2022-04-06T09:34:14.747+00:00

We are using Windows FW in Active Dircetory's Group Policy to control access to computers of users registered in the AD domain.

Currently, access control is done by specifying the IP address of the target AD user's computer in the scope of Group Policy FW.

In the future, we would like to implement access control using a method other than specifying IP addresses because the IP addresses of computers change dynamically.

Is there any good way to do this?

Windows
Windows
A family of Microsoft operating systems that run across personal computers, tablets, laptops, phones, internet of things devices, self-contained mixed reality headsets, large collaboration screens, and other devices.
4,802 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Eleven Yu (Shanghai Wicresoft Co,.Ltd.) 10,691 Reputation points Microsoft Vendor
    2022-04-25T02:15:59.527+00:00

    Hi,

    Below article describe different security policy settings that can control user authentication to a network or device, the resources that users are permitted to access, whether to record a user's or group's actions in the event log and membership in a group.
    https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/security-policy-settings

    From your description, it seems that you can use User Rights Assignment policy.

    User Rights Assignment. Specify the users or groups that have logon rights or privileges on a device.

    https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/user-rights-assignment

    Best regards,

    If the Answer is helpful, please click "Accept Answer" and upvote it. Thanks.

    0 comments