How to allow certain group of comptuers and users to access file server?

[ljCharlie]

I run a file server on windows 2003 server. How do I only allow certain group of computers and users to be able to access my shared files?

[doctorgonzo]

Do you have a domain set up or is it simply peer-to-peer file sharing?

I've never used Windows Server 2003, but I'm assuming that you can set granular file sharing permissions like in XP Pro.

[ljCharlie]

File server is part of a domain but I do not have access to this domain server.

[mairving]

Originally Posted by ljCharlie File server is part of a domain but I do not have access to this domain server.

If they are logging into the domain, then you couldn't use a local security policy. You could set something up via GP but it would have to be a domain policy. About the only thing that you could do is allow them to login but not have access to files.

[ljCharlie]

Thanks for the response. So another word, the Local Security Settings/Security Settings/Local Policies/User Rights Assignment/Log on locally policy is not going to make any difference if the user logs in and authenticated through the domain controller, correct? So the best method is still going to be group policy from the domain, right?

[faulkner132]

You control this through "Sharing and Security" on the folder. This will allow you to set share level permissions and NTFS level permissions.

[mairving]

Originally Posted by ljCharlie Thanks for the response. So another word, the Local Security Settings/Security Settings/Local Policies/User Rights Assignment/Log on locally policy is not going to make any difference if the user logs in and authenticated through the domain controller, correct? So the best method is still going to be group policy from the domain, right?

Yes and no. You can control which domain users logon to the machine but it is part of the domain security policy. You can control who logs on locally via the local policy.

[mairving]

Originally Posted by faulkner132 You control this through "Sharing and Security" on the folder. This will allow you to set share level permissions and NTFS level permissions.

You can do that but it sounds like that he wants people to still be able to access their files remotely, just doesn't want them logging in to the fileserver.

[ljCharlie]

Many thanks for all your help. I found that Log on locally gives me what I want as far as preventing users from login to the file server locally. However, what I want to do next is control who, when and from what computer the user can map to the shared folders. I do not want the user to use his own laptop from home or different department and map to our shared folder 24/7 without using domain policy. Is this possible?