Limit Network Share access by IP - Win 2K3

Hello - I have a network share on a Windows 2003 server that I would
only like certain IP addresses to be able to connect to... however, I
do not want to limit connectivity by IP address on any other resource
on the server. Is there a way to do this?

You dont say if you mean "any other resource" to be other network shares or
not. If you do, then you need to use share permissions and file ACLs to do
the security.

If you mean that you want to restrict all network shares on the server to
select IP addresses, you can do that with "Routing and Remote Access"
service. You can setup Inbound Filters to restrict access to the file
sharing ports and also specify a network range, or single IP address in the
filter.


"Matt G." <(E-Mail Removed)> wrote in message
news:(E-Mail Removed) om...
> Hello - I have a network share on a Windows 2003 server that I would
> only like certain IP addresses to be able to connect to... however, I
> do not want to limit connectivity by IP address on any other resource
> on the server. Is there a way to do this?

An example - say I have 2 network shares configured on my server.... I
want one network share to only be accessible by a specific IP address,
the other network share can be accessible by all IP addresses (but
limited to only those configured in NTFS on the physical folder).
Seems like the first paragraph is the way to go....

"David J Klawiter" <(E-Mail Removed)> wrote in message news:<(E-Mail Removed)>...
> You dont say if you mean "any other resource" to be other network shares or
> not. If you do, then you need to use share permissions and file ACLs to do
> the security.
>
> If you mean that you want to restrict all network shares on the server to
> select IP addresses, you can do that with "Routing and Remote Access"
> service. You can setup Inbound Filters to restrict access to the file
> sharing ports and also specify a network range, or single IP address in the
> filter.
>
>
> "Matt G." <(E-Mail Removed)> wrote in message
> news:(E-Mail Removed) om...
> > Hello - I have a network share on a Windows 2003 server that I would
> > only like certain IP addresses to be able to connect to... however, I
> > do not want to limit connectivity by IP address on any other resource
> > on the server. Is there a way to do this?

Given your example, you will have to limit access to the one share using
share permissions and file level ACLs. Those are based on user account
though and will not do exactly what you are hoping to accomplish. The user
will have to have an account in the appropriate security context (local
machine if standalone, and or a domain account) to be able to access this
share.

"Matt G." <(E-Mail Removed)> wrote in message
news:(E-Mail Removed) om...
> An example - say I have 2 network shares configured on my server.... I
> want one network share to only be accessible by a specific IP address,
> the other network share can be accessible by all IP addresses (but
> limited to only those configured in NTFS on the physical folder).
> Seems like the first paragraph is the way to go....
>