Re: How can I restrict access to our network?

From: Tim (erat_at_NOSPAMblueyonder.co.uk)
Date: 10/13/04 

Date: Wed, 13 Oct 2004 21:21:46 +0100

Hi there,

Many thanks Doug this is what I have done so far>

I have added each computer to each other computer that I want to
share files with as users, disabled Simple
file sharing on each of these computers and Disabled in Security options
Limit local use of blank password.

Then on each folder that I wish each of the computers to share files and
folders I have set permissions to set users and removed Everyone from all
the Share permissions and have repeated this in the Security option of each
Folder and file.

Now this works but it seems somewhat cumbersome when all I want to do is
stop just one computer from seeing our files and folders.

I have noticed that the computer that cannot see our folders and files can
see the Folders that are set to share but when they click on them they then
get an access prevention message saying they don't have permission that is
good but I wish it were easier.

On the computer that I don't want to see the rest of our network I have
disabled NetBIOS over TCP/IP and that then prevents them even seeing the
Workgroup.

But surely there must be a better way, not sure I can disable computer 1 as
an administrator as they need to load and remove their own software etc.

Any more pointers or things to try?

Many thanks for everyone's input, Tim.

"Doug Sherman [MVP]" <dsherman@nospam.tampabay.rr.com> wrote in message
news:%23ekWuZTsEHA.1016@TK2MSFTNGP10.phx.gbl...
> If the user of computer 1 is not a member of the local administrators
> group
> he/she will not be able to re-enable File and Printer sharing. If the
> user
> of computer 1 is a member of the local administrators group, he/she will
> be
> able to undo any changes you make on computer 1.
> You could prevent this through Group Policy in a domain environment. In a
> workgroup environment with Simple File Sharing disabled, you can deny
> network access to a user account on each of the other machines or simply
> not
> create the user account on the other machines. Also, with XP Pro SP2 on
> the
> other machines, you can use the Advanced tab on the Firewall to block
> certain IP address.
>
> Doug Sherman
> MCSE Win2k/NT 4.0, MCSA, MCP+I, MVP
>
> "Tim" <erat@NOSPAMblueyonder.co.uk> wrote in message
> news:erXuj8RsEHA.220@TK2MSFTNGP15.phx.gbl...
>> Hi there,
>>
>> Sorry should have said XP Pro SP2 on all machines.
>>
>> Can this be done simply or is it very complex?
>>
>> Many thanks, Tim.
>>
>>
>> "Jetro" <ik9480@spam.rogers.com> wrote in message
>> news:ePJ5AwRsEHA.1400@TK2MSFTNGP11.phx.gbl...
>> > You can restrict access to the Network Properties, services, and
> registry
>> > using local policy. Depending on OS, it can be gpedit.msc or
>> > poledit.exe
>> > editor.
>> >
>> >
>>
>>
>
>

Relevant Pages

  • Re: Outlook Express on Two Computers
    ... Did re- start both machines. ... Have for along time been storing messages in folders other then inbox. ... MS-MVP Outlook Express ... check Outlook Express inbox from my laptop what ever I have on ...
    (microsoft.public.windows.inetexplorer.ie6_outlookexpress)
  • Re: Working without a Word work file - Word 2003 / Outlook 2003
    ... You are using Word 2003 with Windows ... This issue is generally caused if the user temp folders don't exist. ... Serious problems might occur if you modify the registry incorrectly ... Deleted the DataKey on the machines and the problem continued. ...
    (microsoft.public.word.application.errors)
  • Re: User permissions - Server 2003
    ... Home folder box Domain Admin was removed from the account and Domain User has been left in place. ... You can deny users access to machines except their own in Active Directory Users and Computers. ... (NTFS permissions will not let users browse eachtohers directories). ... I have a shared Home directory on the server with departmental type folders residing within. ...
    (microsoft.public.windows.server.general)
  • Re: active directory project
    ... I can finish all 38 machines way before someone puts together a PRF ... Imagine all the stuff in the IE temp folders, app data folders, temp locations, etc. ... In the beginning I was able to sit down and speak to the compny owner of my customer individually and together with the ex-owner of the company he was acquiring as to what to expect, features, bennies, etc, and incorporating them into the current infrastructure. ... Your profiles will be eliminated and you will start fresh, but I will be around for the first week to insure a smooth transition, making sure mapped drives work, their ERP worked, migrated data from their ERP into the acquiring company's ERP, mergred their PSTs into their new Exchange mailboxes, setup their iPhones, BB's and Windows Mobile units, laptops to use Outlook Anwhere, VPN setup, GPO controlled MY Doc Folder Redirection with Offline Folders, logon scripts and Windows Firewall, automated WSUS and McAfee ePolicy Orchestrator, as well as rename and assimilate their current two Windows 2003 servers into the domain, etc. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Message Window not closing when clicking on Send
    ... Now that you say it is affecting three machines, look for something they have in common. ... MS-MVP Outlook Express ... Create your own user defined folders for storing mail and>> move ...
    (microsoft.public.windows.inetexplorer.ie6_outlookexpress)