I have a 2000 domain and AD, from a GPO I have all XP firewall enabled. I
also have a GPO that allows admins to do remote tasks, as RDP, remote
management etc. All these exceptions is set by IP or subnet and that's ok as
long as I'm in my office, but we have about 70 remote sites connected via
WAN-links. The number of sites increases all the time as the company grow.
Is there another way to controll access but ip, for example by logon name,
computer name?
We have a 2004 ISA proxy, could it be used?
I hope to find another way rather than enter one IP from each site in my
exceptionlist.

Regards,
Jan Larsson