Access control in Active Directory GPOs when IP addresses change dynamically.

test29998411 281 Reputation points

We are using Windows FW in Active Dircetory's Group Policy to control access to computers of users registered in the AD domain.

Currently, access control is done by specifying the IP address of the target AD user's computer in the scope of Group Policy FW.

In the future, we would like to implement access control using a method other than specifying IP addresses because the IP addresses of computers change dynamically.

Is there any good way to do this?

A family of Microsoft operating systems that run across personal computers, tablets, laptops, phones, internet of things devices, self-contained mixed reality headsets, large collaboration screens, and other devices.
4,946 questions
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. Eleven Yu (Shanghai Wicresoft Co,.Ltd.) 10,706 Reputation points Microsoft Vendor


    Below article describe different security policy settings that can control user authentication to a network or device, the resources that users are permitted to access, whether to record a user's or group's actions in the event log and membership in a group.

    From your description, it seems that you can use User Rights Assignment policy.

    User Rights Assignment. Specify the users or groups that have logon rights or privileges on a device.

    Best regards,

    If the Answer is helpful, please click "Accept Answer" and upvote it. Thanks.

    0 comments No comments