Access control in Active Directory GPOs when IP addresses change dynamically.

Question

We are using Windows FW in Active Dircetory's Group Policy to control access to computers of users registered in the AD domain.

Currently, access control is done by specifying the IP address of the target AD user's computer in the scope of Group Policy FW.

In the future, we would like to implement access control using a method other than specifying IP addresses because the IP addresses of computers change dynamically.

Is there any good way to do this?

Answer 1

Hi,

Below article describe different security policy settings that can control user authentication to a network or device, the resources that users are permitted to access, whether to record a user's or group's actions in the event log and membership in a group.
https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/security-policy-settings

From your description, it seems that you can use User Rights Assignment policy.

User Rights Assignment. Specify the users or groups that have logon rights or privileges on a device.

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/user-rights-assignment

Best regards,

---

If the Answer is helpful, please click "Accept Answer" and upvote it. Thanks.