Changing IP Reservations in SBS 2000

Hi there
We currently run only ONE server which is DC (AD-Domain Controller, DHCP, DNS, WINS, Print, Application, File, BackupServer etc)

We currently use 10.0.0.x range for our intranet purposes. I want to change the IP addressing pool from 10.0.p.q range to 10.0.r.s. This is because the octect that is reserved for the server (main Server which is DHCP, DNS, DC, IIS and Print server) is 10.0.0.1. And i'm not comfortable with this IP address for security reasons as it is the first octect in the 10.0.0.x block and anyone (a potential hacker can have his first guess corrrect)

I was wondering if i can change the IP address for the server to say 10.0.230.20 and change the name of the server from say bingo to complexBingo and then update any references to the old server name from client machines to new one (any shortcuts to \\bingo to \\complexBingo for example) would be enough???

Can anyone please help me understand the consequences of doing this and if this is a better way of doing it???? because i don't want to change and then get flooded with calls from users next day and land myself in chaos

Regards

kiran

Jim
Thu May 20 06:49:35 CDT 2004

It is a private ip scheme so you are not really exposed to the real
world. How do you anticipate a hack in? Does the server have a real
password? Something like jrB_do# itsFre Note upper case, lower case,
numbers, characters, spaces and a nonsense password that is not word
or name. Sort of hard to guess. I have over 40 servers with the ip
being either .1 or .2 and never had an issue. Not to say that means
anything but security starts with private ips and good passwords.

Disable the guest account.

Make all the users have complex passwords which can be set as a policy
in AD.

It would not be worth it to me to change the ip or the server name.

"Kiran" <anonymous@discussions.microsoft.com> wrote:

>Hi there,
>We currently run only ONE server which is DC (AD-Domain Controller, DHCP, DNS, WINS, Print, Application, File, BackupServer etc).
>
>We currently use 10.0.0.x range for our intranet purposes. I want to change the IP addressing pool from 10.0.p.q range to 10.0.r.s. This is because the octect that is reserved for the server (main Server which is DHCP, DNS, DC, IIS and Print server) is 10.0.0.1. And i'm not comfortable with this IP address for security reasons as it is the first octect in the 10.0.0.x block and anyone (a potential hacker can have his first guess corrrect).
>
>I was wondering if i can change the IP address for the server to say 10.0.230.20 and change the name of the server from say bingo to complexBingo and then update any references to the old server name from client machines to new one (any shortcuts to \\bingo to \\complexBingo for example) would be enough????
>
>Can anyone please help me understand the consequences of doing this and if this is a better way of doing it???? because i don't want to change and then get flooded with calls from users next day and land myself in chaos.
>
>Regards,
>
>kiran

Jim B. SBS MVP
remove the mvp to send email

anonymous
Thu May 20 21:01:05 CDT 2004

Thanks Jim

I was also wondering as we currently have dhcp scope as 10.0.0.1 to 10.0.0.254 with subnet mask 255.255.255.0. Obviously, the possible network hosts are 254 which we anticipate to run out of IP addresses pretty soon. Now, i was wondering if i can edit the scope and the subnet mask from the above to 10.0.0.1 to 10.0.255.254 with subnet 255.255.0.0 to increase the IP addresses to 67,000 aprox. and add a new DHCP server and share the load balancing to 80/20 as recommended by the MS. Would this change effect the present system if I leave the naming conventions and the IP addresses as it is???

regards

Kiran

Jim
Thu May 20 22:03:17 CDT 2004

SBS 2000 supports 50 users. At most I seem to have about one network
printer per 10 people. I cannot imagine a SBS 2000 install that would
consume more that 70 ips. No need for any load balancing with a small
SBS install.

What are you doing that could possibly have a need for a subnet
anything more than 255.255.255.0? You cannot be talking SBS any more.

"Kiran" <anonymous@discussions.microsoft.com> wrote:

>Thanks Jim.
>
>I was also wondering as we currently have dhcp scope as 10.0.0.1 to 10.0.0.254 with subnet mask 255.255.255.0. Obviously, the possible network hosts are 254 which we anticipate to run out of IP addresses pretty soon. Now, i was wondering if i can edit the scope and the subnet mask from the above to 10.0.0.1 to 10.0.255.254 with subnet 255.255.0.0 to increase the IP addresses to 67,000 aprox. and add a new DHCP server and share the load balancing to 80/20 as recommended by the MS. Would this change effect the present system if I leave the naming conventions and the IP addresses as it is????
>
>regards,
>
>Kiran

Jim B. SBS MVP
remove the mvp to send email