1.    26 Apr 2010 #1
    Rich Eustace Guest

    Restricting VPN Access in SBS 2003


    Is it possible to restrict access for VPN clients to a single directory in
    SBS2003?

    Perhaps I am using the wrong technique.

    We have a remote site which needs access to some MS Office Access databases
    but that is all. VPN lets them access all the shares on the server which
    seems to be overkill and not very secure.

    Thanks
      My System SpecsSystem Spec

  2.    26 Apr 2010 #2
    Cris Hanna [SBS - MVP] Guest

    Re: Restricting VPN Access in SBS 2003


    are the workstations joined to the domain?

    --
    Cris Hanna [SBS - MVP] (since 1997)
    Co-Contributor, Windows Small Business Server 2008 Unleashed
    http://www.amazon.com/Windows-Small-...7269967&sr=8-1
    Owner, CPU Services, Belleville, IL
    A Microsoft Registered Partner
    ------------------------------------
    MVPs do not work for Microsoft
    Please do not submit questions directly to me.

    "Rich Eustace" <rich.eustace@newsgroup> wrote in message news:81779B06-63F9-4BF9-BC58-B58B4C6D9C06@newsgroup
    Is it possible to restrict access for VPN clients to a single directory in
    SBS2003?

    Perhaps I am using the wrong technique.

    We have a remote site which needs access to some MS Office Access databases
    but that is all. VPN lets them access all the shares on the server which
    seems to be overkill and not very secure.

    Thanks
      My System SpecsSystem Spec

  3.    26 Apr 2010 #3
    Larry Struckmeyer[SBS-MVP] Guest

    Re: Restricting VPN Access in SBS 2003


    Rich:

    Opening Access files, (or indeed any database that is not client-server)
    over a VPN is just asking for corruption. Better to use TS or RWW.

    -
    Larry
    Please post the resolution to your
    issue so others may benefit
    -
    Get Your SBS Health Check at
    www.sbsbpa.com


    > Is it possible to restrict access for VPN clients to a single
    > directory in SBS2003?
    >
    > Perhaps I am using the wrong technique.
    >
    > We have a remote site which needs access to some MS Office Access
    > databases but that is all. VPN lets them access all the shares on the
    > server which seems to be overkill and not very secure.
    >
    > Thanks
    >

      My System SpecsSystem Spec

  4.    26 Apr 2010 #4
    Jim Behning SBS MVP Guest

    Re: Restricting VPN Access in SBS 2003


    Make a security group called MS Access Only users. Go to shares on
    server. Go to Security tab. Add that security group with a deny or no
    permissions. That should keep them out of the folders. They may see
    them but that is ok.

    On Mon, 26 Apr 2010 05:43:01 -0700, Rich Eustace
    <rich.eustace@newsgroup> wrote:

    >Is it possible to restrict access for VPN clients to a single directory in
    >SBS2003?
    >
    >Perhaps I am using the wrong technique.
    >
    >We have a remote site which needs access to some MS Office Access databases
    >but that is all. VPN lets them access all the shares on the server which
    >seems to be overkill and not very secure.
    >
    >Thanks
    See what SBS support is working on
    http://blogs.technet.com/sbs/default.aspx
    Check your SBS with the SBS Best Practices Analyzer
    http://blogs.technet.com/sbs/archive...A/default.aspx
      My System SpecsSystem Spec

  5.    26 Apr 2010 #5
    Rich Eustace Guest

    Re: Restricting VPN Access in SBS 2003


    No they are not

    "Cris Hanna [SBS - MVP]" wrote:

    > are the workstations joined to the domain?
    >
    > --
    > Cris Hanna [SBS - MVP] (since 1997)
    > Co-Contributor, Windows Small Business Server 2008 Unleashed
    > http://www.amazon.com/Windows-Small-...7269967&sr=8-1
    > Owner, CPU Services, Belleville, IL
    > A Microsoft Registered Partner
    > ------------------------------------
    > MVPs do not work for Microsoft
    > Please do not submit questions directly to me.
    >
    > "Rich Eustace" <rich.eustace@newsgroup> wrote in message news:81779B06-63F9-4BF9-BC58-B58B4C6D9C06@newsgroup
    > Is it possible to restrict access for VPN clients to a single directory in
    > SBS2003?
    >
    > Perhaps I am using the wrong technique.
    >
    > We have a remote site which needs access to some MS Office Access databases
    > but that is all. VPN lets them access all the shares on the server which
    > seems to be overkill and not very secure.
    >
    > Thanks
      My System SpecsSystem Spec

  6.    27 Apr 2010 #6
    SuperGumby [SBS MVP] Guest

    Re: Restricting VPN Access in SBS 2003


    not sure why Cris asked, I can see some reference but it's minor.

    You control share access for VPN users in _exactly_ the same way you control
    access for local users, by setting either the share or file level
    permissions.

    Jim's idea for 'deny' works but I encourage you to forget this idea about
    'how do I control VPN users' and more simply look at it as 'how do I control
    file access based on user'.

    "Rich Eustace" <rich.eustace@newsgroup> wrote in message
    news:1950D7E5-C9E3-4934-AEE8-265139BAA4E4@newsgroup

    > No they are not
    >
    > "Cris Hanna [SBS - MVP]" wrote:
    >

    >> are the workstations joined to the domain?
    >>
    >> --
    >> Cris Hanna [SBS - MVP] (since 1997)
    >> Co-Contributor, Windows Small Business Server 2008 Unleashed
    >> http://www.amazon.com/Windows-Small-...7269967&sr=8-1
    >> Owner, CPU Services, Belleville, IL
    >> A Microsoft Registered Partner
    >> ------------------------------------
    >> MVPs do not work for Microsoft
    >> Please do not submit questions directly to me.
    >>
    >> "Rich Eustace" <rich.eustace@newsgroup> wrote in
    >> message news:81779B06-63F9-4BF9-BC58-B58B4C6D9C06@newsgroup
    >> Is it possible to restrict access for VPN clients to a single directory
    >> in
    >> SBS2003?
    >>
    >> Perhaps I am using the wrong technique.
    >>
    >> We have a remote site which needs access to some MS Office Access
    >> databases
    >> but that is all. VPN lets them access all the shares on the server
    >> which
    >> seems to be overkill and not very secure.
    >>
    >> Thanks

      My System SpecsSystem Spec


Similar Threads
Thread Forum
Re: Restricting User Access Hours
I'm not sure if I understand the steps entirely with this option... 1) Install PsTools (which includes PsLoggedon) from...
Vista account administration
RE: Restricting User Access Hours
So far, all replies have referred either to internet-specific hour restrictions via making changes on the router or links and suggestions on...
Vista account administration
Restricting User Access Hours
I'm not sure where to post this, so have posted it a few places. As a parent, I would like my children to not be able to use the computers during...
Vista account administration
Restricting user access ?
Is there a way to turn off access to the Control Panel by secondary user accounts ? My kids keep getting in there and changing things, I'd like to...
General Discussion
Restricting User Access & Personalized Start Menu
Two questions. Is there a way to have personalized start menues for each user in Vista, if so how? I would like to restrict the Guest account,...
Vista General
Restricting remote desktop access
I'd like to create an account for someone to log in and configure specific programs: - IIS - Visual Studio - limited access to certain...
Vista General
Restricting remote desktop access
I'd like to create an account for someone to log in and configure specific programs: - IIS - Visual Studio - limited access to certain...
Vista General

Our Sites
  • Ten Forums
  • Eight Forums
  • Seven Forums
  • PC Help Forum
  • Help Me Bake
  • Site Links
  • Contact Us
  • Privacy and Cookies
  • About Us
    Windows Vista Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

    Designer Media Ltd
    All times are GMT -5. The time now is 19:22.
    .