question

29998411 avatar image
0 Votes"
29998411 asked DSPatrick edited

Access control in Active Directory GPOs when IP addresses change dynamically.

We are using Windows FW in Active Dircetory's Group Policy to control access to computers of users registered in the AD domain.

Currently, access control is done by specifying the IP address of the target AD user's computer in the scope of Group Policy FW.

In the future, we would like to implement access control using a method other than specifying IP addresses because the IP addresses of computers change dynamically.

Is there any good way to do this?

windows-group-policy
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

1 Answer

ElevenYu-MSFT avatar image
0 Votes"
ElevenYu-MSFT answered

Hi,

Below article describe different security policy settings that can control user authentication to a network or device, the resources that users are permitted to access, whether to record a user's or group's actions in the event log and membership in a group.
https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/security-policy-settings

From your description, it seems that you can use User Rights Assignment policy.

User Rights Assignment. Specify the users or groups that have logon rights or privileges on a device.

https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/user-rights-assignment

Best regards,


If the Answer is helpful, please click "Accept Answer" and upvote it. Thanks.

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.