Desktop

Ask something
Question Locked

How to isolate users

0 helpful
13 replies

by groove13 1 view

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
Hi,I'm asking about a easiest solution how to isolate network users on LAN just to prevent accessing each other computer's shared folders anf files. I would not have access to client computers and their settings so I need to isolate them on some active item in the network. Do I need some manageable switch or firewall or what particular functions do I need to set on these? Can anybody help me just with a few hints. Thanks

13 replies

by cmatthews

..HP Procurve's are nice. I'm sure there's models from other mfg's, just Google it. If you cascade these make sure your core switches can support enough VLAN tags (HP > 2000)

by groove13

I think you are the only one who has understand my request. So thanks. Can U actualy describe how to set VLANs on Procurve Switch? or have for me some hint how it should work?

by cmatthews

..many here also understand the dependent nature some LAN's. Perhaps some of those PC's really need to access other peer or domain-shared printers, or files. Since you have no access to PC settings, we can only deduce that as a third party, you want to impose something on an otherwise working system.. it may introduce other problems..

Would you gave us some more detail on the quantity, OS and working purpose(s) of this "ill-behaved group of PC's/users?

Is access to only limited resources and/or the internet all they do?

by oldbaritone

Do they log in to a domain? Create a no-sharing group policy and push it out on the domain.

by cg it

you can configure the firewall to block file and printer sharing.

you can limit users ability to share files and printers.

by cg it

so the client computers can't share folders or printers but still have network access.

there's a lot of variables here without a lot of information. If on a domain network, you can use group policy to control computer settings. If a workgroup, you have to get a little more creative.

someone mentioned VLans and that will do it, but then that adds complexity. Getting vlans [which usually are seperate subnets]to all access the default gateway requires trunking and allowing them to access the trunk line, then the router has to have the routes in it's table. Then you have to make sure intervlan routing isn't enabled or you've just defeated the whole purpose.

Then there is cost. Vlans requires a lot of networking expertise and expensive equipment and as I mentioned adds complexity.

by cmatthews

..some days I couldn't be bothered, but others it get some creative neurons firing.

Wasn't there something said here about moon phases?

by groove13

Its room with 20 sockets connected. There will be posted random clients with random OS. Its only a showroom where some people need to access internet. But I need to restrict that someone sees each other in worgroup. Cause they are mostly businessman who are affraid of their data and mostly know nothing about networks. Thats the thing

This discussion is closed to new replies.