Mulitple Workgroups

[Guest]

I want to setup a network that has two workgroups 5 computers in one
workgroup need to be able to share data between each other. In the workgroup
there are 4 other PC's that need internet access ONLY. I do NOT want them to
see the shares let alone get access to any shares.
Do I just have to create two workgroups and it is as simples as that or are
there some other configuration settings I should have in place that will NOT
allow those Internet only PC's Access to the shares.
Any help is appreciated

 

[Guest]

Workgroups aren't a security device. They are purely a way of organizing what
you see in Network Places into regular groups. A machine in another workgroup
can still be accessed quite easily.

My suggestion would be to gather all file-shares onto one (preferably XP
Pro) computer, and make that the server. Put a decent firewall on this, e.g.
Kerio. The Windows firewall will do fine on the clients. Turn off Simple
Sharing. Create accounts on this machine for the users of the clients, and
assign rights to the shares as required. Make sure that there is NO account
on the server matching those on the Internet-only computers, and they won't
be able to gain access. You could reinforce this by setting a firewall-rule
to block ports 139 and 445 for their IP-range, thus even if they pinch a
password it won't do them any good.

Now you have only one place to set user-permissions or IP-rules. Much
simpler to manage, and much more secure than peer-sharing.

Internet access can be by a separate router, or proxy / ICS on the
server-machine. If you want to limit or monitor internet-access, then a proxy
such as Jana Server gives more control than ICS.

~ All that is required for evil to flourish is for good people to do nothing.
http://tibetsupport.org.uk