Is there any way to restrict access to 2003r2 shares based on what computer a user logs into

I have a server farm consisting of all windows 2003 servers with R2

All my workstations are Windows XP professional with SP2

What I would like is to be able to limit my users access to domain shares
(specifically DFS shares) so that these shares are only accessible while
they are logged into and using one of the Terminal Servers.

I do not want these shares accessible from the XP Pro workstations.



I cannot block access to the servers from the XP workstations with firewall
or IPsec as they still need access to sysvol for policies and scripts and
printer services.



Any suggestions no matter how far out would be greatly appreciated



Thanks




.

Relevant Pages