preventing intra-site resource mapping ?

[ste]

Archived from groups: microsoft.public.win2000.group_policy (More info?)

A domain hase many sites, some slow-linked and all defined in AD sites
& server
Is there a way to prevent users that logs to the domain to access
network shares on file servers of different sites than the one their
client belong?

TIA
Ste

 

[Guest]

Archived from groups: microsoft.public.win2000.group_policy (More info?)

Yes, use share and NTFS (if volumes on servers are formated with NTFS)
permissions.


"Ste" <jstef1@yahoo.it> wrote in message
news:caac6bf4.0406080211.220aa508@posting.google.com...
> A domain hase many sites, some slow-linked and all defined in AD sites
> & server
> Is there a way to prevent users that logs to the domain to access
> network shares on file servers of different sites than the one their
> client belong?
>
> TIA
> Ste

 

[ste]

Archived from groups: microsoft.public.win2000.group_policy (More info?)

Hello Alex,
Trying to be clearer:

1. W2k domain ItalyDomain.it has a Rome site and a Milan site
2. Rome site has its own w2k DC and FS
Milan site has its own w2k DC and FS
3. User Alex in Rome logs to ItalyDomain.com and has access to shares on Rome FS
4. User Alex comes in Milan, logs to ItalyDomain.com and maps shares on Rome FS

Can I stop/control this?

TIA
Ste

"Alex Tarata" <alex@claex.com> wrote in message news:<#7WCrUUTEHA.2408@tk2msftngp13.phx.gbl>...
> Yes, use share and NTFS (if volumes on servers are formated with NTFS)
> permissions.
>
>
> "Ste" <jstef1@yahoo.it> wrote in message
> news:caac6bf4.0406080211.220aa508@posting.google.com...
> > A domain hase many sites, some slow-linked and all defined in AD sites
> > & server
> > Is there a way to prevent users that logs to the domain to access
> > network shares on file servers of different sites than the one their
> > client belong?
> >
> > TIA
> > Ste

 

[Guest]

Archived from groups: microsoft.public.win2000.group_policy (More info?)

Use your firewall to block traffic external to the site.

--
Eric Chamberlain, CISSP
Campus Active Directory Architect
Central Computing Services
University of California, Berkeley
http://calnetad.berkeley.edu



"Ste" <jstef1@yahoo.it> wrote in message
news:caac6bf4.0406080211.220aa508@posting.google.com...
> A domain hase many sites, some slow-linked and all defined in AD sites
> & server
> Is there a way to prevent users that logs to the domain to access
> network shares on file servers of different sites than the one their
> client belong?
>
> TIA
> Ste