Re: How to restrict file access to Domain Computers Only

Search on ms.com for the guidance papers on using
IPsec for "doman isolation"

You could apply techniques from them to all only domain
members to have network traffic with the fileshare server.

However, your users could/would just save copies to their
workstations and copy to their non-domain laptops/devices
from there (or email the docs out).

Your attempt to accomplish this by setting permissions to
administrators and domain computers did not work because
the access is not being done by the domain computers but by
the account logged into the domain comp, so the check is
against that user account, not the computer account.

<none@xxxxxxxxx> wrote in message
news:et4BpBeyGHA.1300@xxxxxxxxxxxxxxxxxxxxxxx
Single Windows Server 2003. All workstations are Windows XP SP2.

I'm trying to restrict access to the shared files on the Server to
computers
that are members of the Domain and so far it isn't working out too well.

Basically, we are allowing people to bring in laptop computers and connect
to our network for Internet access and for access to certain printers but
do
not want to allow access to any shared files on the Server. We don't want
any files copied to a laptop and leaving the premises. These computers
are
Workgroup computers; not Domain computers. I tried setting the
Permissions
for the shared files to only allow access by Administrators and Domain
Computers, but this cut off access by all computers even though the
computers I tested with were clearly members of the Domain Computers
group.

Any idea what I'm missing here? Do the Permissions/Security settings need
to be some combination of Domain Computers and Authenticated Users in
order
to accomplish this?

Please help.

Thanks.

James


.

Relevant Pages