Connect. Communicate. Collaborate. Securely.

Home » Kerio User Forums » Kerio Control » How to stop users ...
  •  
DEYDOD

Messages: 5
Karma: 0
Send a private message to this user
Hi
I have a small lan and I need to stop user to form one account. I've tried to assign dinamyc IPs via DHCP and to authenticate by IP, but they set static IP and log again from one account. Is there any way to block them by MAC address and to stop sharing username/passwords.
  •  
ziemang

Messages: 8
Karma: 0
Send a private message to this user
I work with small LANs as part of my job. One thing I stress to all of my customers is a "Tough Love" network policy.

Employees of the company must sign a "Computer Useage Contract". In effect, bad computer manners (configuration changes, addition of unauthorized software, sharing of passwords, etc. without management approval) will lead to displinary action or job termination.

Remember that the data on your network, large or small, is the property of the company, not the employees. Depending on what your company does, vital internal information about your company can be pilfered to competitors or worse.

Discuss this with your superiors about insituting a serious network policy. Software cannot solve all problems, it is but a tool, but better company policies give you and management some manuerving room to handle the "renegade" employees.
  •  
ososto

Messages: 13
Karma: 0
Send a private message to this user
I think u can specify the users to login from specify address
  •  
DEYDOD

Messages: 5
Karma: 0
Send a private message to this user
ososto wrote on Fri, 05 October 2007 00:29

I think u can specify the users to login from specify address


Yes, but they can be authenticated only by IP address. If one user change his IP address he can login.
  •  
crown2000

Messages: 10
Karma: 0
Send a private message to this user
I have same problem & i cannot overcome it.
please help.

[Updated on: Mon, 15 October 2007 23:11]

  •  
an2ny79

Messages: 109
Karma: 2
Send a private message to this user
Kerio DHCP combined with Active Directory policy will do the trick..

I set KWF to act as DHCP server (reserving the IP for specific MAC address), then I created a policy in Active Directory to "Prohibit access to property of components of a LAN connection". In this case, user won't be able to change the IP number of his/her workstation.
  •  
DEYDOD

Messages: 5
Karma: 0
Send a private message to this user
Hi
I think Active Directory may be useful when the client computers are connected in domain. Is that right? (I'm not shure)
  •  
an2ny79

Messages: 109
Karma: 2
Send a private message to this user
That's the point.. If you only set up client to client network, my suggestion isn't helpful. But if you set up a manageable network (Server + workstation) you will unlock the power of networking.
Previous Topic: 100% Blocking Messengers ..
Next Topic: reject login rest users ?
Goto Forum:
  


Disclaimer:
Kerio discussion forums are intended for open communication between forum members and may contain information and material posted by members which may be useful in learning about Kerio products. The discussion forums are not intended to provide technical support for any specific product. Any information implied or expressed in the discussion forums is that of the posting member. Kerio is in no way responsible for the information posted in the forums, or its accuracy. Kerio employees may participate in the discussions, but their postings do not represent an offical position of the company on any issues raised or discussed. Kerio reserves the right to monitor and maintain the forums to promote free and accurate exchange of information.

Current Time: Tue Nov 21 16:37:28 CET 2017

Total time taken to generate the page: 0.00424 seconds
.:: Contact :: Home ::.
Powered by: FUDforum 3.0.4.