Security

Ask something
Discussion Locked

Limiting network access on a Win2K

0 helpful
5 replies

by tech

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

We have a programmer in India. We've set up a Win2K laptop on our LAN and want him to have access to this machine. The access is via a T1 line through a router. Once he gets to this machine we want him limited to this machine - no access to the other workstations on the LAN. We are a small firm and at this point do not have a domain server. The "server" is an NT4 and I can keep him off those three drives by denying him a password. However most of the workstations are on a peer-to-peer andI need to keep him out of these machines. I've looked through the help on the Win2K laptop but have not been able to find a way to keep him out of the peer-to-peer machines.

Thanks,

JOHN

5 replies

by mshavrov

There are many ways how you can do this, but it all depend on details. Most secured way is to connect his machine to separate network. But it will require additional HUB, which should be connected to separate port in router. Another way is to configure his machine with another network IP address, but in this case you should add secondary IP address in router's LAN interface. But if he's spy it won't help :-)

If you need additional details you can contact me directly.

Good luck.

by shanghai sam

Couple of other options:
What operating system are your workstations using?
If you're using Win2K Pro or NT4 WS for your workstations, you have the same answer as for your server (assuming HDs are formatted NTFS) (i.e apply permissions to all resouces you want to protect).
If you're using Win9x, you still have few options, although some won't be as secure as others. There are 2 methods of controlling access to a shared resource using this OS: share-level access control, whereby you have a common shared password for each shared resource; or user-level access control whereby access is based on a list of authorized users. However, niether of these methods will keep out a person determined to see what you're hiding.
Another option for Win9x, since your have a NT4 "server" which you can protect, is to move all resources that need to be shared to that server and turn off File and Print Sharing on each of the workstations. If there aren't any shared resources, ther is nothing your programmer can connect to from another computer.
However, if you have the capability, the solution given in Answer 1 is probably your best bet.

This discussion is closed to new replies.