locked
detecting "unknown devices" on network RRS feed

  • Question

  • I was wundering if it is possible to make a monitor in Sce 2007 sp1 to get a alert when a strange pc comes on the network. For example: in activ directory are all the pc's. When a pc connects to the network, which is not in the ad then send a alert...

    Is this possible in sce? Or thru another method?


    freddie
    Thursday, October 15, 2009 8:44 AM

Answers

  • That has to be supported by your network infrastructure too. Take a look at this page http://www.microsoft.com/downloads/details.aspx?familyid=8e47649e-962c-42f8-9e6f-21c5ccdcf490&displaylang=en

    ..and it is also important to understand the purpose of this, why you want to do it. is it only to see non trusted compiuters or do you want to prevent them from communicate on the network

    Anders Bengtsson | Microsoft MVP - Operations Manager | http://www.contoso.se
    Thursday, October 15, 2009 8:52 AM

All replies

  • That has to be supported by your network infrastructure too. Take a look at this page http://www.microsoft.com/downloads/details.aspx?familyid=8e47649e-962c-42f8-9e6f-21c5ccdcf490&displaylang=en

    ..and it is also important to understand the purpose of this, why you want to do it. is it only to see non trusted compiuters or do you want to prevent them from communicate on the network

    Anders Bengtsson | Microsoft MVP - Operations Manager | http://www.contoso.se
    Thursday, October 15, 2009 8:52 AM
  • Hello freddie,

    I'm afraid it's not a built-in function of SCE 2007. As Anders suggested, NAP is a good choice to do this work.

    Thanks,
    Yog Li - MSFT
    Friday, October 16, 2009 10:04 AM
  • That has to be supported by your network infrastructure too. Take a look at this page http://www.microsoft.com/downloads/details.aspx?familyid=8e47649e-962c-42f8-9e6f-21c5ccdcf490&displaylang=en

    ..and it is also important to understand the purpose of this, why you want to do it. is it only to see non trusted compiuters or do you want to prevent them from communicate on the network

    Anders Bengtsson | Microsoft MVP - Operations Manager | http://www.contoso.se


    Thanks. Is this also available for the Windows2003 server? or something simular?

    I wan't to use this for monitoring only so i know somebody " strange"  is connecting to our network..


    freddie
    Friday, October 16, 2009 10:38 AM
  • Hello freddie,

    I'm afraid it's not a built-in function of SCE 2007. As Anders suggested, NAP is a good choice to do this work.

    Thanks,
    Yog Li - MSFT

    But you can select many counters from a specific server like the mail queue counter. Why isn't that functioning then?



    freddie
    Friday, October 16, 2009 10:53 AM
  • Hello freedie,

    With my understanding, the SCE server 2007 enables you to centrally manage Microsoft Windows–based servers and other computers and network devices in your organization. However, it is not designed to determine if a computer is a threat.

    Thanks,
    Yog Li - MSFT
    Wednesday, October 21, 2009 11:56 AM
  • That is correct, but you might get the features from partner management packs. Secure Vantage has a lot of cool MPs
    Anders Bengtsson | Microsoft MVP - Operations Manager | http://www.contoso.se
    Wednesday, October 21, 2009 1:52 PM