allow anonymous share on one NIC, not on the second

[Guest]

I have a Windows 2003 R2 Server with 2 NIC and no routing between them. I
want to allow anonymous file sharing on one NIC but not on the second. But I
want to allow File sharing with valid credential on the second Nic.

Any idea ?

 

[Danny Sanders]

I

want to allow anonymous file sharing on one NIC but not on the second. But
I
want to allow File sharing with valid credential on the second Nic.

How would the NIC know if you had valid credentials or not unless you set
the permissions on the NIC itself? That is what AD is for. There would have
to be some software on the NIC that can query AD.



What are you trying to do?

If by some chance you got this to work you would be adding more delay to
network access.

hth
DDS

 

[Guest]

I have a physical protected subnet on one side (in a locked room) with some
computers not in the w2k3 server DOMAIN. So I want to allow them to use
anonymous share on the server, but I want to block anonymous share on the
other side where a unidentified computer can be connected.

 

[Phillip Windell]

Put credentials on the share. You will be prompted for credentials when
attemtping the access it,..or you could create dupliate accounts on the machines
involved "workgroup style". Nics have nothing to do with shares, and shares are
not "on nics". Anonymous is exactly that,..."anonymous",...don't use it.


--
Phillip Windell
www.wandtv.com

The views expressed, are my own and not those of my employer, or Microsoft, or
anyone else associated with me, including my cats.
-----------------------------------------------------

 

[Guest]

I know that shares are not on NIC, but what I'm searching for, is a kind of
Firewall or VPN solution wich will block anonymous connections on one of the
NIC. But MS VPN seems to be a little bit complicated to implement.

 

[Guest]

Or a way to re-share on an other server like Gateway for Netware do. My setup
is a little bit complicated, so don't take me for a newbie please. If you
want more details:

I have a prod domain and an exact copy of the prod domain in a lab
environment. I'have an intermediate subnet between the two where some servers
can be acessed directly by the prod domain, and via a NAT by the lab domain
(evidently, the prod domain and the lab domain are prohibited to communicate
between them).
I want to place a file server in the intermediate subnet, wich is member of
the prod domain, so it can be managed with the domain credentials. But I want
to let the lab domain access the shares on this file server via the NAT
without being popup for credentials.

 

[Phillip Windell]

You will have to do it "workgroup style". Create a matching account locally on
the file server that matches the account in current use in the lab domain. I
don't think it will matter if the lab account is a local or domain level account
as long as the name and password match the account created locally on the file
server.

There is no way I know of to do what you ask with a share accessed anonymously
with the Everyone Group.


--
Phillip Windell
www.wandtv.com

The views expressed, are my own and not those of my employer, or Microsoft, or
anyone else associated with me, including my cats.