Hey guys,
I'm trying to add a list of MAC addresses per user as a constraint, I was thinking maybe setting it up on the user's AD entry or something similar, but I'm not sure how's it done. The AD card has a lot of stuff in it, I'm sure MAC address must already be in the schema but I can't find it.
Let me clarify again, I'm not trying to set up MAC authentication for devices, that, I'm already doing; I want assign specific a list of specific MAC addresses so if the user is connecting from an unknown device it'll get rejected. The only way I could come up with is adding new policies per user or worse, per MAC address, and some variations from that. That's zero practical unless scripted, and still...mm-no.
I'm aware MAC addresses can be easily spoofed specially in this context where user input is still needed, but I'd still like to try it. If you guys can clue me in where to begin I'd forever grateful I promise. :)
I bet you think this post is about you. Don't you…don't you. ♪