Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

For a project I'm working on I'm looking for the ability to assign a specific ip to users when they start a terminal service session.

I'm using Windows Server 2008 R2 SP1 and I tried using Remote Desktop IP Virtualization but as far I understand it lets me only to enable the ability to assign a random ip to a session when the user access with or without a dhcp (changing some registry keys).

I need this to set up filtering rules per user on the project firewall.

EDIT

From what I understand there are a couple of dlls that handle (in "fake dhcp" mode, changing the registry keys) the ip assigment. If assign a static IP to an Users isn't actually supported, can a library be built from scratch to handle this situation and, if yes, when i can find some MS docs about these libraries (I refer to TSVIPool.dll and the second one that can be assigned to the key Control in the same registry path, I can't find the name)

share|improve this question

1 Answer 1

If you have more than one network adaptor on the server, it apparently only supports per-program mode, not per-session mode. Might also be worth checking the DHCP server logs to see what mac addresses it's trying to get new leases with.

But yeah, the MS docs seem to indicate this is merely about getting apps that need a specific client port available working, not as a policy engine. Perhaps you could look into ident for windows and a firewall that supports that as an alternative?

share|improve this answer
    
A firewall that uses windows ident may be exposed to security problems. However i think that i'll use, in the end, a modified pfSense based firewall and a winlogon library to notify logins and logouts based on an ssl communication with preshared keys (so no keys exchange) ... this would supply a minimium security –  daniele_dll May 16 '12 at 9:59

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.