Is it possible to limit access for certain users based on their IP address in Active Directory 2008? For example a super admin would be able to access from anywhere but a lower level one would only be able to access from one specific IP.
Yes and no. Out of the box the answer is no. You can however setup a system using NAC on AD groups, or an ISA firewall setup that allowed firewall level access to domain controllers based on user authentication from AD.
Doing this is an advanced configuration that requires a lot maintenance and administration and I would not recommend it. If you are an authenticated user you can query a lot of information from AD and this is required for proper functionality.