File or Folder access by Computer name not user name

G

Guest

Guest
Archived from groups: microsoft.public.win2000.security (More info?)

Is there a way that I can secure a file or folder by Computer name not Log-in
name?
Our environment consist of an AD runs on Windows 2000 server. Our Active
Dicrectory contains the name of the computers and Users.

For example, if i have a file on Enterpirse server which i want to give
access to a specific computer, I go to the properties of the file , on
Security Tap Add the name of the computer i want to the list of users. But
that is not working. It only look at the user name (log-In) name.

How can I do this? Restrict access to a file by Computer name on our network
rather than User name.

thanks,
 
G

Guest

Guest
Archived from groups: microsoft.public.win2000.security (More info?)

When you restrict folder share permissions by computer account you
are stating that the System account of that computer may access the
share.
If you want to restrict to all users on a specific computer there is no
direct way, as access is controlled by account. You could filter the
needed ports so that only that computer could use filesharing with
that specific computer, but the actual access would still be controlled
by the accounts in use to attempt the connection. Enabling Guest within
an IP+Port restricted sharing is possible but in reality is a bad option.

--
Roger Abell
Microsoft MVP (Windows Security)
"moh456" <moh456@discussions.microsoft.com> wrote in message
news:F30AC2DA-4392-455F-83FB-52C2BB8A27A1@microsoft.com...
> Is there a way that I can secure a file or folder by Computer name not
Log-in
> name?
> Our environment consist of an AD runs on Windows 2000 server. Our Active
> Dicrectory contains the name of the computers and Users.
>
> For example, if i have a file on Enterpirse server which i want to give
> access to a specific computer, I go to the properties of the file , on
> Security Tap Add the name of the computer i want to the list of users. But
> that is not working. It only look at the user name (log-In) name.
>
> How can I do this? Restrict access to a file by Computer name on our
network
> rather than User name.
>
> thanks,