|
windows
newsgroups
|
|||||||||||||||||||||||
|
|||||||||||||||||||||||
Isolate network usersGood day
I need to know how is it possible to isolate certain PCs on the same hub/switch. The 2 sets of groups can be on 2 different domains/workgroups but should not share information at all! How is this possible on Windows XP Pro. Thanks Gibgo wrote:
> Good day Just make users and restrict network resources to the users you want.> I need to know how is it possible to isolate certain PCs on the same > hub/switch. The 2 sets of groups can be on 2 different > domains/workgroups but should not share information at all! > > How is this possible on Windows XP Pro. > Turn off Simple Sharing so you can set the fine-grained permissions you need. HOW TO Create and Configure User Accounts in Windows XP - http://support.microsoft.com/default.aspx?scid=kb;en-us;279783 User Management and Security in Windows XP - http://www.windowsnetworking.com/articles_tutorials/wxppusrm.html Example for a Workgroup Computer A - users Bill and Tom Computer B - users Mary and Jill If Mary and Jill don't have user accounts on Computer A, they won't be able to access Computer A's shared resources. If you want to be even more elaborate, you can create user groups, too. Malke It's not clear to me what you are asking. If you truly want one set of users
totally isolated from another group of users you'll need two different LANs IMHO. You can't do that using just a hub. That basically means a knowledgeable user in one group trying to find out what a user in the other group is doing will not find it easy to do. If on the other hand you just want each group to have their own resources, and you're not worried about a user in one group trying to hack into the resources of the other group then Malke's suggestion will work. It really depends on the level of security you want, which is not clear to me from your post. -- Show quoteHide quoteDavid Hettel Please post any reply as a follow-up message in the news group for everyone to see. I'm sorry, but I don't answer questions addressed directly to me in E-mail or news groups. Microsoft Most Valuable Professional Program http://mvp.support.microsoft.com DISCLAIMER: This posting is provided "AS IS" with no warranty of any kind, either expressed or implied, made in relation to the accuracy, reliability or content of this post. The author shall not be liable for any direct, indirect, incidental or consequential damages arising out of the use of, or inability to use, information or opinions expressed in this post and confers no rights. "Malke" <notreally@invalid.invalid> wrote in message news:uH3aU%23eHHHA.3468@TK2MSFTNGP04.phx.gbl... > Gibgo wrote: > >> Good day >> I need to know how is it possible to isolate certain PCs on the same >> hub/switch. The 2 sets of groups can be on 2 different >> domains/workgroups but should not share information at all! >> >> How is this possible on Windows XP Pro. >> > > Just make users and restrict network resources to the users you want. > Turn off Simple Sharing so you can set the fine-grained permissions you > need. > > HOW TO Create and Configure User Accounts in Windows XP - > http://support.microsoft.com/default.aspx?scid=kb;en-us;279783 > > User Management and Security in Windows XP - > http://www.windowsnetworking.com/articles_tutorials/wxppusrm.html > > Example for a Workgroup > > Computer A - users Bill and Tom > Computer B - users Mary and Jill > > If Mary and Jill don't have user accounts on Computer A, they won't be > able to access Computer A's shared resources. > > If you want to be even more elaborate, you can create user groups, too. > > Malke > -- > Elephant Boy Computers > www.elephantboycomputers.com > "Don't Panic!" > MS-MVP Windows - Shell/User Hi
You can not configure two independent Networks on one regular switch/hub. So if they have to be on the same switch Malke solution is the way to go. Otherwise there are ways to create such a separation with Routers. I can not tell you what to do in specific since you did not provided detailed information. You can see the general principle here, http://www.ezlan.net/shield.html Jack (MVP-Networking). Show quoteHide quote "Gibgo" <Gi***@discussions.microsoft.com> wrote in message news:13BAAE34-0C48-4B70-A621-CA0D03B51C25@microsoft.com... > Good day > I need to know how is it possible to isolate certain PCs on the same > hub/switch. The 2 sets of groups can be on 2 different domains/workgroups > but > should not share information at all! > > How is this possible on Windows XP Pro. > > Thanks Basically its an Internet Cafe with 2 admin PCs in back office with 4 PCs in
front for users/browsers. The configuration is such ADSL/Router Modem Netgear DG834G, will need to add another hub as the Netgear Modem only has 4x 10/100 ports on it & there is a total of 6 PCs. Need to secure admin PCs from user/browser PCs. Security would be a PRIORITY as a possible threat from a "user"(please note that users will be logged in with "Limited Usage" under Windows XP user protocols). There is no concern with regard to admin PCs being a threat. Hope this has more clarity. Thanks Show quoteHide quote "Jack (MVP-Networking)." wrote: > Hi > You can not configure two independent Networks on one regular switch/hub. > So if they have to be on the same switch Malke solution is the way to go. > Otherwise there are ways to create such a separation with Routers. > I can not tell you what to do in specific since you did not provided > detailed information. > You can see the general principle here, http://www.ezlan.net/shield.html > Jack (MVP-Networking). > > "Gibgo" <Gi***@discussions.microsoft.com> wrote in message > news:13BAAE34-0C48-4B70-A621-CA0D03B51C25@microsoft.com... > > Good day > > I need to know how is it possible to isolate certain PCs on the same > > hub/switch. The 2 sets of groups can be on 2 different domains/workgroups > > but > > should not share information at all! > > > > How is this possible on Windows XP Pro. > > > > Thanks > > > Gibgo wrote:
Show quoteHide quote > Basically its an Internet Cafe with 2 admin PCs in back office with 4 Yes, this makes all the difference in the world. Your admin PC's should> PCs in front for users/browsers. > > The configuration is such > ADSL/Router Modem Netgear DG834G, will need to add another hub as the > Netgear Modem only has 4x 10/100 ports on it & there is a total of 6 > PCs. > > Need to secure admin PCs from user/browser PCs. Security would be a > PRIORITY as a possible threat from a "user"(please note that users > will be logged in with "Limited Usage" under Windows XP user > protocols). > > There is no concern with regard to admin PCs being a threat. > > Hope this has more clarity. be on a separate network entirely from the public computers. You will need to purchase more equipment and use a different subnet. The public computers should have file/printer sharing turned off and you may also want to look into using something like Deep Freeze from Faronics on them to return them to a completely pristine state every night. Malke 
Other interesting topics
Wireless hardware
Can't Use WPA in Ad Hoc, only WEP...??? Help Please Wirelelss Zero Configuration Problem Networks sharing a frequency? Using Two Wireless Cards in One Computer Disconnected Network Cable Wireless router Tips Linksys print server problem! Wireless USB adaptor Wntipcfg Shows Wireless Adapter Only |
|||||||||||||||||||||||
