I have active directory and several clients joined the domain. Every user logs to the computer with domain user and password credentials.
I need the users only to be able to log in to the specified computer and no other computer.
This computer is monitored.
If someone discovers the password (or malicious worker who knows the pass) he can add another computer with the computer name, user and pass, and the joining process will allow him to join the computer. He can do a lot of problems while discovering that we have illegal login.
My application uses wcf (windows communication foundation) and the service is hosted in iis. It uses message authentication with integrated windows authentication.
My question is how can I protect the application only to be authenticated from the computer I like (pc at work, it is not allowed to use it outside the work place, by workplace I mean several offices geographically alocated)?