We are using Windows FW in Active Dircetory's Group Policy to control access to computers of users registered in the AD domain.
Currently, access control is done by specifying the IP address of the target AD user's computer in the scope of Group Policy FW.
In the future, we would like to implement access control using a method other than specifying IP addresses because the IP addresses of computers change dynamically.
Is there any good way to do this?
Hi,
Below article describe different security policy settings that can control user authentication to a network or device, the resources that users are permitted to access, whether to record a user's or group's actions in the event log and membership in a group.
https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/security-policy-settings
From your description, it seems that you can use User Rights Assignment policy.
https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/user-rights-assignmentUser Rights Assignment. Specify the users or groups that have logon rights or privileges on a device.
If the Answer is helpful, please click "Accept Answer" and upvote it. Thanks.
13 people are following this question.
