Windows Server / VPN

[C.J]

I've got a 'Server' running XP, which is simply used inside the office for file sharing, running ACT, backups etc.

The MD currently uses VPN to login from home, and access everything as he would if he was sat in the office.

We are taking on new staff, who will work from home so VPN will be used again.

The problem I have is, when someone VPN's in, they have access to the entire machine/network/file shares as if they were hardwired in.

How can I give them limited access? This would be to 1 machine ('Server') and to a couple of folders on 'Server'.

There are no options within the XP VPN connection wizard, just simply add new username/password.

Would a Windows Server (2003/08) solve this, giving each user rules? Or is there a software I can use?

 

[dum1983]

I would move to a Windows SBS TBH. What's your budget like?

 

[Adam.]

Make a group on the 'server' called restricted. Find the shares you don't want them to access - right click propetries then add that group and assign deny all it.

 

[C.J]

Thanks.

I can't find 'groups' anywhere in XP (on the Server).

Don't really have a budget, as wasn't looking at purchasing anything additional.

 

[PinkoCommie]

Do you have an existing firewall? What is it? It may have remote access functionality built in that's more controllable (assuming it's a proper firewall and not a netgear soho piece of crap)

 

[C.J]

It's a standard BT business hub, BT2700 HGV

 

[Cookie]

I would move to a Windows SBS TBH. What's your budget like?

+1!

 

[PinkoCommie]

It's a standard BT business hub, BT2700 HGV

Belurgh. No better than a standard home router. Either shell out for a small business firewall (Checkpoint UTM-1 Edge or Juniper SSG5) or go the SBS route.

 

[C.J]

Windows Server 2003? 2008?

And I assume it'll give me full control over which user views what folders, and can have simultaneous connections?

It'll only be used for file sharing over VPN and internally.

 

[dum1983]

Windows Server 2003? 2008?

And I assume it'll give me full control over which user views what folders, and can have simultaneous connections?

It'll only be used for file sharing over VPN and internally.

In short yes to all.

I would try for some new hardware aswell TBH. But then I always try and push my luck.

 

[Adam.]

Thanks.

I can't find 'groups' anywhere in XP (on the Server).

Don't really have a budget, as wasn't looking at purchasing anything additional.

Is it pro or home?

 

[C.J]

In short yes to all.

I would try for some new hardware aswell TBH. But then I always try and push my luck.

Hah, I'll try, but likely will just be the software.

Is it pro or home?

It's Pro.

 

[Adam.]

Right click My Computer then select Manage. Its then under Users on the left hand side.

 

[C.J]

Right click My Computer then select Manage. Its then under Users on the left hand side.

Great cheers, I can see I can add usernames etc to the group, e.g. USER1 to GROUP1.

How can I tell GROUP1 to only access FOLDER1, instead of the entire network/PC?

 

[adam1942]

from memory you need to enable simple folder sharing on XP to set permissions.

http://support.microsoft.com/kb/304040


then apply the permissions

http://www.microsoft.com/windowsxp/using/networking/security/permissions.mspx


you can also manage share permissions from right click my computer > manage > shared folders > shares > right click on share > properties > share permissions