Restrict windows share access by IP address

  • Thread starter Thread starter Ze MD
  • Start date Start date
Z

Ze MD

Hello all,

I work in a production network with contractors.
All the employees and the contractors access the same server with
several shares.

How can I restrict the share access by IP adresses (to be sure the
contractors won't be able to connect from their workstation, even is
someone give them the login/password)

Thank you

Ze MD
 
This capability, to selectively control access to different shares
on a server based on the originating IP of the access attempt,
is not natively available in Windows.
Perhaps you would be better off by making sure that contractors,
etc. do not have accounts that are in excessive groups, or make
sure that they are always in a Contractors group that is itself
used to Deny access on resources.
 
Ze said:
I work in a production network with contractors.
All the employees and the contractors access the same server with
several shares.

How can I restrict the share access by IP adresses (to be sure the
contractors won't be able to connect from their workstation, even is
someone give them the login/password)
Click to expand...

As Roger says, Windows file sharing doesn't let you restrict by IP
address for some shares and not others. I don't know of a way to run two
sets of shares on different IP addresses on the same server and use
firewalling.

If a second server and firewalling for employee only shares isn't an
option, I beleive there is one built-in technology that may let you do
what you want -- WebDAV ("Web Folders").

Esentially you could run your employee-only shares as WebDAV shares, and
use Internet Information Services to restrict access to those by IP
address in the web site properties. (Wouldn't stop the crafy contractors
connecting in via someone else's machine though...)
 
Back
Top