Block network access to Domain PC from Non-Domain computers

i have setup windows 2012 domain controller server. there around 20 pcs ( windows
7 nodes) joined domain. theses pc got ip address via organisation
wide dhcp server. become possible other pcs in organisation to
"see" , access" these pc.i wish (1) network access
should remain restricted within these 20 nodes means these 20 nodes , server
should able access each other , work, while outside pc domain
should not able access of 20pc (even though have valid login id
, password) part of domain. how can achievable? cannot
put these pc on separate , dedicated switch or create vlan @ switch level.
<o:p></o:p>

---

windows technology

no, can't done gpo because need decide computer authorized ip.

open dhcp server - expand until ipv4 - right click , properties (i guess)

there see tabs filter.

my recomendation:

for fill dhcp make no restriction. after 1 or 2 day's check current leases , right click on can add mac filter list.
after enable filter , that's it. no big deal.

but make sure choose allow option, not denied ;-) prevent every computer on mac list ip address dhcp.

Windows Server  >  Windows Server 2012 Setup