Windows Vista Forums

Restricting VPN Access in SBS 2003

  1. #1


    Rich Eustace Guest

    Restricting VPN Access in SBS 2003

    Is it possible to restrict access for VPN clients to a single directory in
    SBS2003?

    Perhaps I am using the wrong technique.

    We have a remote site which needs access to some MS Office Access databases
    but that is all. VPN lets them access all the shares on the server which
    seems to be overkill and not very secure.

    Thanks

      My System SpecsSystem Spec

  2. #2


    Cris Hanna [SBS - MVP] Guest

    Re: Restricting VPN Access in SBS 2003

    are the workstations joined to the domain?

    --
    Cris Hanna [SBS - MVP] (since 1997)
    Co-Contributor, Windows Small Business Server 2008 Unleashed
    http://www.amazon.com/Windows-Small-...7269967&sr=8-1
    Owner, CPU Services, Belleville, IL
    A Microsoft Registered Partner
    ------------------------------------
    MVPs do not work for Microsoft
    Please do not submit questions directly to me.

    "Rich Eustace" <rich.eustace@newsgroup> wrote in message news:81779B06-63F9-4BF9-BC58-B58B4C6D9C06@newsgroup
    Is it possible to restrict access for VPN clients to a single directory in
    SBS2003?

    Perhaps I am using the wrong technique.

    We have a remote site which needs access to some MS Office Access databases
    but that is all. VPN lets them access all the shares on the server which
    seems to be overkill and not very secure.

    Thanks

      My System SpecsSystem Spec

  3. #3


    Larry Struckmeyer[SBS-MVP] Guest

    Re: Restricting VPN Access in SBS 2003

    Rich:

    Opening Access files, (or indeed any database that is not client-server)
    over a VPN is just asking for corruption. Better to use TS or RWW.

    -
    Larry
    Please post the resolution to your
    issue so others may benefit
    -
    Get Your SBS Health Check at
    www.sbsbpa.com


    > Is it possible to restrict access for VPN clients to a single
    > directory in SBS2003?
    >
    > Perhaps I am using the wrong technique.
    >
    > We have a remote site which needs access to some MS Office Access
    > databases but that is all. VPN lets them access all the shares on the
    > server which seems to be overkill and not very secure.
    >
    > Thanks
    >


      My System SpecsSystem Spec

  4. #4


    Jim Behning SBS MVP Guest

    Re: Restricting VPN Access in SBS 2003

    Make a security group called MS Access Only users. Go to shares on
    server. Go to Security tab. Add that security group with a deny or no
    permissions. That should keep them out of the folders. They may see
    them but that is ok.

    On Mon, 26 Apr 2010 05:43:01 -0700, Rich Eustace
    <rich.eustace@newsgroup> wrote:

    >Is it possible to restrict access for VPN clients to a single directory in
    >SBS2003?
    >
    >Perhaps I am using the wrong technique.
    >
    >We have a remote site which needs access to some MS Office Access databases
    >but that is all. VPN lets them access all the shares on the server which
    >seems to be overkill and not very secure.
    >
    >Thanks
    See what SBS support is working on
    http://blogs.technet.com/sbs/default.aspx
    Check your SBS with the SBS Best Practices Analyzer
    http://blogs.technet.com/sbs/archive...A/default.aspx

      My System SpecsSystem Spec

  5. #5


    Rich Eustace Guest

    Re: Restricting VPN Access in SBS 2003

    No they are not

    "Cris Hanna [SBS - MVP]" wrote:

    > are the workstations joined to the domain?
    >
    > --
    > Cris Hanna [SBS - MVP] (since 1997)
    > Co-Contributor, Windows Small Business Server 2008 Unleashed
    > http://www.amazon.com/Windows-Small-...7269967&sr=8-1
    > Owner, CPU Services, Belleville, IL
    > A Microsoft Registered Partner
    > ------------------------------------
    > MVPs do not work for Microsoft
    > Please do not submit questions directly to me.
    >
    > "Rich Eustace" <rich.eustace@newsgroup> wrote in message news:81779B06-63F9-4BF9-BC58-B58B4C6D9C06@newsgroup
    > Is it possible to restrict access for VPN clients to a single directory in
    > SBS2003?
    >
    > Perhaps I am using the wrong technique.
    >
    > We have a remote site which needs access to some MS Office Access databases
    > but that is all. VPN lets them access all the shares on the server which
    > seems to be overkill and not very secure.
    >
    > Thanks

      My System SpecsSystem Spec

  6. #6


    SuperGumby [SBS MVP] Guest

    Re: Restricting VPN Access in SBS 2003

    not sure why Cris asked, I can see some reference but it's minor.

    You control share access for VPN users in _exactly_ the same way you control
    access for local users, by setting either the share or file level
    permissions.

    Jim's idea for 'deny' works but I encourage you to forget this idea about
    'how do I control VPN users' and more simply look at it as 'how do I control
    file access based on user'.

    "Rich Eustace" <rich.eustace@newsgroup> wrote in message
    news:1950D7E5-C9E3-4934-AEE8-265139BAA4E4@newsgroup

    > No they are not
    >
    > "Cris Hanna [SBS - MVP]" wrote:
    >

    >> are the workstations joined to the domain?
    >>
    >> --
    >> Cris Hanna [SBS - MVP] (since 1997)
    >> Co-Contributor, Windows Small Business Server 2008 Unleashed
    >> http://www.amazon.com/Windows-Small-...7269967&sr=8-1
    >> Owner, CPU Services, Belleville, IL
    >> A Microsoft Registered Partner
    >> ------------------------------------
    >> MVPs do not work for Microsoft
    >> Please do not submit questions directly to me.
    >>
    >> "Rich Eustace" <rich.eustace@newsgroup> wrote in
    >> message news:81779B06-63F9-4BF9-BC58-B58B4C6D9C06@newsgroup
    >> Is it possible to restrict access for VPN clients to a single directory
    >> in
    >> SBS2003?
    >>
    >> Perhaps I am using the wrong technique.
    >>
    >> We have a remote site which needs access to some MS Office Access
    >> databases
    >> but that is all. VPN lets them access all the shares on the server
    >> which
    >> seems to be overkill and not very secure.
    >>
    >> Thanks


      My System SpecsSystem Spec


Restricting VPN Access in SBS 2003
Similar Threads
Thread Forum
Re: Restricting User Access Hours Vista account administration
RE: Restricting User Access Hours Vista account administration
Restricting User Access Hours Vista account administration
Restricting user access ? General Discussion
Restricting remote desktop access Vista General