Windows Vista Forums

Restricting VPN Access in SBS 2003

  1. #1


    Rich Eustace Guest

    Restricting VPN Access in SBS 2003

    Is it possible to restrict access for VPN clients to a single directory in
    SBS2003?

    Perhaps I am using the wrong technique.

    We have a remote site which needs access to some MS Office Access databases
    but that is all. VPN lets them access all the shares on the server which
    seems to be overkill and not very secure.

    Thanks

      My System SpecsSystem Spec

  2. #2


    Cris Hanna [SBS - MVP] Guest

    Re: Restricting VPN Access in SBS 2003

    are the workstations joined to the domain?

    --
    Cris Hanna [SBS - MVP] (since 1997)
    Co-Contributor, Windows Small Business Server 2008 Unleashed
    http://www.amazon.com/Windows-Small-...7269967&sr=8-1
    Owner, CPU Services, Belleville, IL
    A Microsoft Registered Partner
    ------------------------------------
    MVPs do not work for Microsoft
    Please do not submit questions directly to me.

    "Rich Eustace" <rich.eustace@newsgroup> wrote in message news:81779B06-63F9-4BF9-BC58-B58B4C6D9C06@newsgroup
    Is it possible to restrict access for VPN clients to a single directory in
    SBS2003?

    Perhaps I am using the wrong technique.

    We have a remote site which needs access to some MS Office Access databases
    but that is all. VPN lets them access all the shares on the server which
    seems to be overkill and not very secure.

    Thanks

      My System SpecsSystem Spec

  3. #3


    Larry Struckmeyer[SBS-MVP] Guest

    Re: Restricting VPN Access in SBS 2003

    Rich:

    Opening Access files, (or indeed any database that is not client-server)
    over a VPN is just asking for corruption. Better to use TS or RWW.

    -
    Larry
    Please post the resolution to your
    issue so others may benefit
    -
    Get Your SBS Health Check at
    www.sbsbpa.com


    > Is it possible to restrict access for VPN clients to a single
    > directory in SBS2003?
    >
    > Perhaps I am using the wrong technique.
    >
    > We have a remote site which needs access to some MS Office Access
    > databases but that is all. VPN lets them access all the shares on the
    > server which seems to be overkill and not very secure.
    >
    > Thanks
    >


      My System SpecsSystem Spec

  4. #4


    Jim Behning SBS MVP Guest

    Re: Restricting VPN Access in SBS 2003

    Make a security group called MS Access Only users. Go to shares on
    server. Go to Security tab. Add that security group with a deny or no
    permissions. That should keep them out of the folders. They may see
    them but that is ok.

    On Mon, 26 Apr 2010 05:43:01 -0700, Rich Eustace
    <rich.eustace@newsgroup> wrote:

    >Is it possible to restrict access for VPN clients to a single directory in
    >SBS2003?
    >
    >Perhaps I am using the wrong technique.
    >
    >We have a remote site which needs access to some MS Office Access databases
    >but that is all. VPN lets them access all the shares on the server which
    >seems to be overkill and not very secure.
    >
    >Thanks
    See what SBS support is working on
    http://blogs.technet.com/sbs/default.aspx
    Check your SBS with the SBS Best Practices Analyzer
    http://blogs.technet.com/sbs/archive...A/default.aspx

      My System SpecsSystem Spec

  5. #5


    Rich Eustace Guest

    Re: Restricting VPN Access in SBS 2003

    No they are not

    "Cris Hanna [SBS - MVP]" wrote:

    > are the workstations joined to the domain?
    >
    > --
    > Cris Hanna [SBS - MVP] (since 1997)
    > Co-Contributor, Windows Small Business Server 2008 Unleashed
    > http://www.amazon.com/Windows-Small-...7269967&sr=8-1
    > Owner, CPU Services, Belleville, IL
    > A Microsoft Registered Partner
    > ------------------------------------
    > MVPs do not work for Microsoft
    > Please do not submit questions directly to me.
    >
    > "Rich Eustace" <rich.eustace@newsgroup> wrote in message news:81779B06-63F9-4BF9-BC58-B58B4C6D9C06@newsgroup
    > Is it possible to restrict access for VPN clients to a single directory in
    > SBS2003?
    >
    > Perhaps I am using the wrong technique.
    >
    > We have a remote site which needs access to some MS Office Access databases
    > but that is all. VPN lets them access all the shares on the server which
    > seems to be overkill and not very secure.
    >
    > Thanks

      My System SpecsSystem Spec

  6. #6


    SuperGumby [SBS MVP] Guest

    Re: Restricting VPN Access in SBS 2003

    not sure why Cris asked, I can see some reference but it's minor.

    You control share access for VPN users in _exactly_ the same way you control
    access for local users, by setting either the share or file level
    permissions.

    Jim's idea for 'deny' works but I encourage you to forget this idea about
    'how do I control VPN users' and more simply look at it as 'how do I control
    file access based on user'.

    "Rich Eustace" <rich.eustace@newsgroup> wrote in message
    news:1950D7E5-C9E3-4934-AEE8-265139BAA4E4@newsgroup

    > No they are not
    >
    > "Cris Hanna [SBS - MVP]" wrote:
    >

    >> are the workstations joined to the domain?
    >>
    >> --
    >> Cris Hanna [SBS - MVP] (since 1997)
    >> Co-Contributor, Windows Small Business Server 2008 Unleashed
    >> http://www.amazon.com/Windows-Small-...7269967&sr=8-1
    >> Owner, CPU Services, Belleville, IL
    >> A Microsoft Registered Partner
    >> ------------------------------------
    >> MVPs do not work for Microsoft
    >> Please do not submit questions directly to me.
    >>
    >> "Rich Eustace" <rich.eustace@newsgroup> wrote in
    >> message news:81779B06-63F9-4BF9-BC58-B58B4C6D9C06@newsgroup
    >> Is it possible to restrict access for VPN clients to a single directory
    >> in
    >> SBS2003?
    >>
    >> Perhaps I am using the wrong technique.
    >>
    >> We have a remote site which needs access to some MS Office Access
    >> databases
    >> but that is all. VPN lets them access all the shares on the server
    >> which
    >> seems to be overkill and not very secure.
    >>
    >> Thanks


      My System SpecsSystem Spec

Restricting VPN Access in SBS 2003

Similar Threads
Thread Forum
Re: Restricting User Access Hours
I'm not sure if I understand the steps entirely with this option... 1) Install PsTools (which includes PsLoggedon) from...
Vista account administration
RE: Restricting User Access Hours
So far, all replies have referred either to internet-specific hour restrictions via making changes on the router or links and suggestions on...
Vista account administration
Restricting User Access Hours
I'm not sure where to post this, so have posted it a few places. As a parent, I would like my children to not be able to use the computers during...
Vista account administration
Restricting user access ?
Is there a way to turn off access to the Control Panel by secondary user accounts ? My kids keep getting in there and changing things, I'd like to...
General Discussion
Restricting User Access & Personalized Start Menu
Two questions. Is there a way to have personalized start menues for each user in Vista, if so how? I would like to restrict the Guest account,...
Vista General
Restricting remote desktop access
I'd like to create an account for someone to log in and configure specific programs: - IIS - Visual Studio - limited access to certain...
Vista General
Restricting remote desktop access
I'd like to create an account for someone to log in and configure specific programs: - IIS - Visual Studio - limited access to certain...
Vista General