Restrict access to a user for network resources (files/shares)

  • Thread starter Thread starter Matyi
  • Start date Start date
M

Matyi

Hi,

Can you help please urgently how can i disable to a specific
user/computer to browse the local network? I want him to disable
all local network file access through his account.
The user is member of a domain, please specify in detail how can
i do this? I want to disable access only for 1 user not for all.

thank you
Isty
 
If you want the user to not be able to use the Network Places (Browse the
network), disable the browser service, and if you want, NetBT.

If you want to stop the user of this machine from accessing anything on the
network, change his/ her IP address or unplug the network cable <g>.

Can you be a little more specific? I don't really follow your question?
What do you want to disable?


--

Paul Williams
http://www.msresource.net


Why not join us in our free, public forum?
http://forums.msresource.net
______________________________________
Hi,

Can you help please urgently how can i disable to a specific
user/computer to browse the local network? I want him to disable
all local network file access through his account.
The user is member of a domain, please specify in detail how can
i do this? I want to disable access only for 1 user not for all.

thank you
Isty
 
Hi Paul,

I have disabled the Computer Browser servisce but the user still can
browse on
the LAN.

What i need is to deny to the user to browse on the LAN computers and
to not
delete shared files from them (i dont want to change the sharing
permission i just want to disable for this user this feature).
However the user to be able to use the internet or other VPN networks,
just
no not access any shared files on the LAN.
 
Matyi said:
Hi Paul,

I have disabled the Computer Browser servisce but the user still can
browse on
the LAN.
Click to expand...

Computer browser won't do it. It just means that his PC can't participate as
a browse master for the network.
What i need is to deny to the user to browse on the LAN computers and
to not
delete shared files from them (i dont want to change the sharing
permission i just want to disable for this user this feature).
Click to expand...

Disable NetBIOS over TCP/IP on his PC and he won't be able to browse.
However the user to be able to use the internet or other VPN networks,
just
no not access any shared files on the LAN.
Click to expand...

Then why not just use NTFS security to make sure he can't do anything? Even
if you disable browsing, he could do a blind mapping, etc., and go into the
folders if he isn't blocked from doing so.

Or, if all he needs is Internet access, stick in a router or configure a
VLAN to put his computer on a segregated network entirely, so all he has is
access to the Internet router.
 
Is this a problem with *one* specific user or a class of users? If it is a
group or class of users then there are many solutions. I favor a
strategically placed and configured router mentioned by someone else. If
there are problems with a single specific user then this sounds like a
problem for the Human Resources department and not IT department (unless the
problem child is the director of HR or some other well places executive,
then you're hosed). If someone is randomly deleting files out of ignorance
or malice and cannot be controlled by the local supervisor then they should
be let go.

As always, just my 2¢,
Dave
 
Why not just open the sharing permissions and explicitly add the one user
with a deny?

Mark
 
Back
Top