All NT server 4.0 with SP 6a and all NT workstation 4.0 with sp4 or sp6a
RAS server runs on BDC using MS VPN with PPTP.
My small network uses profile.man control all
domain users access to network resources. In the past, The NETLOGON folder hasbeen shared without “$”. In the past is ok because no user can see it and open because their profile control them. But now, things have been change. My users working from home and use VPN connect to my network. When they
logon same as in office building, their profile do not download to the computer at home. Now they can browse the network neighborhood to open the NETLOGON folder and its content. We have some folder also share without “$” on all workstation.
My questions:
1. How can I block the users to open up the
NETLOGON folder. If I just change the “everyone” to read permission only, will my action cause logon problem because this is very sensavitive folder. I don’t want to log everybody out.
2. Is there a way to blockaccess to other workstation share folder without going in to each computer?
Thanks for any suggestions.