Authorized WAN user can view LAN (W2003 Std Server)

Have a broadband connection plugged into Linksys router then plugged into
switch. How do I prevent unauthorized user who needs to access WAN from
seeing LAN.

You need to explain that a little better.

--
Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com



"Donna" <(E-Mail Removed)> wrote in message
news:29835F85-1F8E-4FDA-A43F-(E-Mail Removed)...
> Have a broadband connection plugged into Linksys router then plugged into
> switch. How do I prevent unauthorized user who needs to access WAN from
> seeing LAN.

i have networked a bldg., which has 2 parts one is office other are tenants.
Tenants need access to internet through WAN but even though they do not have
LAN access they can still view files on the LAN but cannot edit them. The WAN
connects to LAN (router, switch, etc.).

"Phillip Windell" wrote:

> You need to explain that a little better.
>
> --
> Phillip Windell [MCP, MVP, CCNA]
> www.wandtv.com
>
>
>
> "Donna" <(E-Mail Removed)> wrote in message
> news:29835F85-1F8E-4FDA-A43F-(E-Mail Removed)...
> > Have a broadband connection plugged into Linksys router then plugged into
> > switch. How do I prevent unauthorized user who needs to access WAN from
> > seeing LAN.
>
>
>

Don't give the "Everyone Group" read-only access to the Folders. Create a
New Group and add only "authorized" accounts to the group and then give that
group permissions they need to that Folder(s), it should "inheirit" down to
the files and subfolders. Give the Administrors Group "Full Control" the
the same things. When that is done remove the Everyone Group from those
permissions. You will probably have to turn off "inheiritance" at the top
Folder before you can remove the Everyone Group.

If you don't understand what I am explaining then you are gonna have to do
some studying on the subject. This isn't something we can just "whip out"
and give to someone if they don't know what we are talking about.

There are other things you can do as well, but there is no way I can deal
with that without knowing a whole lot more about your situation and
circumstances than what I know now. I don't know if you realize how "BIG"
this issue is and how much ground it can cover. Trading a few emails just
isn't going to cover it.


--
Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com
-----------------------------------------------------
Understanding the ISA 2004 Access Rule Processing
http://www.isaserver.org/articles/IS...cessRules.html

Microsoft Internet Security & Acceleration Server: Guidance
http://www.microsoft.com/isaserver/t...dance/2004.asp
http://www.microsoft.com/isaserver/t...dance/2000.asp

Microsoft Internet Security & Acceleration Server: Partners
http://www.microsoft.com/isaserver/partners/default.asp

Deployment Guidelines for ISA Server 2004 Enterprise Edition
http://www.microsoft.com/technet/pro...isaserver.mspx
-----------------------------------------------------



"Donna" <(E-Mail Removed)> wrote in message
news:69C8C1ED-E4D2-40ED-B2CB-(E-Mail Removed)...
> i have networked a bldg., which has 2 parts one is office other are
tenants.
> Tenants need access to internet through WAN but even though they do not
have
> LAN access they can still view files on the LAN but cannot edit them. The
WAN
> connects to LAN (router, switch, etc.).
>
> "Phillip Windell" wrote:
>
> > You need to explain that a little better.
> >
> > --
> > Phillip Windell [MCP, MVP, CCNA]
> > www.wandtv.com
> >
> >
> >
> > "Donna" <(E-Mail Removed)> wrote in message
> > news:29835F85-1F8E-4FDA-A43F-(E-Mail Removed)...
> > > Have a broadband connection plugged into Linksys router then plugged
into
> > > switch. How do I prevent unauthorized user who needs to access WAN
from
> > > seeing LAN.
> >
> >
> >

You either have to buy a router that has a true DMZ port or you can use
two simple consumer NAT routers and hook them up in a series. So lets
say to have it setup like this:


WAN device
|
First NAT router (Network 192.168.0.1/24) Let's call this Tenets
|
Second NAT router (Network 192.168.50.1/24) Let's call this Office


All the computers on the Office network can see everything.

All the computers on the Tenets network can see the Internet, but they
can't see the office network.

So I think this would solve your problem. I have seen a few hotels do
this to separate the office LAN from the Customers internet. Just make
sure the office computers are at the very end of the NAT series.

-Mark



Donna wrote:
> i have networked a bldg., which has 2 parts one is office other are tenants.
> Tenants need access to internet through WAN but even though they do not have
> LAN access they can still view files on the LAN but cannot edit them. The WAN
> connects to LAN (router, switch, etc.).
>
> "Phillip Windell" wrote:
>
>> You need to explain that a little better.
>>
>> --
>> Phillip Windell [MCP, MVP, CCNA]
>> www.wandtv.com
>>
>>
>>
>> "Donna" <(E-Mail Removed)> wrote in message
>> news:29835F85-1F8E-4FDA-A43F-(E-Mail Removed)...
>>> Have a broadband connection plugged into Linksys router then plugged into
>>> switch. How do I prevent unauthorized user who needs to access WAN from
>>> seeing LAN.
>>
>>

thank you, that is exactly on what I planned to do, you just confirmed it.

"Phillip Windell" wrote:

> Don't give the "Everyone Group" read-only access to the Folders. Create a
> New Group and add only "authorized" accounts to the group and then give that
> group permissions they need to that Folder(s), it should "inheirit" down to
> the files and subfolders. Give the Administrors Group "Full Control" the
> the same things. When that is done remove the Everyone Group from those
> permissions. You will probably have to turn off "inheiritance" at the top
> Folder before you can remove the Everyone Group.
>
> If you don't understand what I am explaining then you are gonna have to do
> some studying on the subject. This isn't something we can just "whip out"
> and give to someone if they don't know what we are talking about.
>
> There are other things you can do as well, but there is no way I can deal
> with that without knowing a whole lot more about your situation and
> circumstances than what I know now. I don't know if you realize how "BIG"
> this issue is and how much ground it can cover. Trading a few emails just
> isn't going to cover it.
>
>
> --
> Phillip Windell [MCP, MVP, CCNA]
> www.wandtv.com
> -----------------------------------------------------
> Understanding the ISA 2004 Access Rule Processing
> http://www.isaserver.org/articles/IS...cessRules.html
>
> Microsoft Internet Security & Acceleration Server: Guidance
> http://www.microsoft.com/isaserver/t...dance/2004.asp
> http://www.microsoft.com/isaserver/t...dance/2000.asp
>
> Microsoft Internet Security & Acceleration Server: Partners
> http://www.microsoft.com/isaserver/partners/default.asp
>
> Deployment Guidelines for ISA Server 2004 Enterprise Edition
> http://www.microsoft.com/technet/pro...isaserver.mspx
> -----------------------------------------------------
>
>
>
> "Donna" <(E-Mail Removed)> wrote in message
> news:69C8C1ED-E4D2-40ED-B2CB-(E-Mail Removed)...
> > i have networked a bldg., which has 2 parts one is office other are
> tenants.
> > Tenants need access to internet through WAN but even though they do not
> have
> > LAN access they can still view files on the LAN but cannot edit them. The
> WAN
> > connects to LAN (router, switch, etc.).
> >
> > "Phillip Windell" wrote:
> >
> > > You need to explain that a little better.
> > >
> > > --
> > > Phillip Windell [MCP, MVP, CCNA]
> > > www.wandtv.com
> > >
> > >
> > >
> > > "Donna" <(E-Mail Removed)> wrote in message
> > > news:29835F85-1F8E-4FDA-A43F-(E-Mail Removed)...
> > > > Have a broadband connection plugged into Linksys router then plugged
> into
> > > > switch. How do I prevent unauthorized user who needs to access WAN
> from
> > > > seeing LAN.
> > >
> > >
> > >
>
>
>