Multiple WorkGroups

[Guest]

I want to setup a network that has two workgroups 5 computers in one
workgroup need to be able to share data between each other. In the workgroup
there are 4 other PC's that need internet access ONLY. I do NOT want them to
see the shares let alone get access to any shares.
Do I just have to create two workgroups and it is as simples as that or are
there some other configuration settings I should have in place that will NOT
allow those Internet only PC's Access to the shares.

 

[Jack \(MVP-Networking\).]

Hi
This was written for Wireless but the exact same idea cam be used wire as
well.
http://www.ezlan.net/shield.html
Jack (MVP-Networking).

 

[Chuck]

I want to setup a network that has two workgroups 5 computers in one
workgroup need to be able to share data between each other. In the workgroup
there are 4 other PC's that need internet access ONLY. I do NOT want them to
see the shares let alone get access to any shares.
Do I just have to create two workgroups and it is as simples as that or are
there some other configuration settings I should have in place that will NOT
allow those Internet only PC's Access to the shares.

Justin,

If you simply put the limited access computers in another workgroup, and don't
stop the Server and Workstation services, they'll still be able to see the other
5 full access computers in Network Neighborhood - Entire Network.

Stop, then Disable the Server and Workstation services. Then un install Client
for Microsoft Networks and File and Printer Sharing for Microsoft Networks from
the network items list in Local Area Connection - Properties. In other words,
reverse the advice to make your network work properly, in my article:
<http://nitecruzr.blogspot.com/2005/05/troubleshooting-network-neighborhood.html#Components>
http://nitecruzr.blogspot.com/2005/05/troubleshooting-network-neighborhood.html#Components

 

[Kyuzo]

Assuming that the computers are set up with XP Professional, wouldn't
setting up permissions also work in this case? They could be all in the same
workgroup but when setting up shares, he could just give permissions to the
5 computers.

 

[Chuck]

Assuming that the computers are set up with XP Professional, wouldn't
setting up permissions also work in this case? They could be all in the same
workgroup but when setting up shares, he could just give permissions to the
5 computers.

Said the OP:
I do NOT want them to see the shares...

If the shares are there, and the right services are running, they'll be visible.

 

[Kyuzo]

Guess I missed reading that part.

Said the OP:
I do NOT want them to see the shares...

If the shares are there, and the right services are running, they'll be visible.

 

[Steve Winograd [MVP]]

Assuming that the computers are set up with XP Professional, wouldn't
setting up permissions also work in this case? They could be all in the same
workgroup but when setting up shares, he could just give permissions to the
5 computers.

There's no way to give permissions to computers. XP Pro's permissions
are based on user accounts. Details here:

Windows XP Professional File Sharing
http://www.practicallynetworked.com/sharing/xp_filesharing/index.htm
--
Best Wishes,
Steve Winograd, MS-MVP (Windows Networking)

Please post any reply as a follow-up message in the news group
for everyone to see. I'm sorry, but I don't answer questions
addressed directly to me in E-mail or news groups.

Microsoft Most Valuable Professional Program
http://mvp.support.microsoft.com

 

[Michael W. Ryder]

I want to setup a network that has two workgroups 5 computers in one
workgroup need to be able to share data between each other. In the workgroup
there are 4 other PC's that need internet access ONLY. I do NOT want them to
see the shares let alone get access to any shares.
Do I just have to create two workgroups and it is as simples as that or are
there some other configuration settings I should have in place that will NOT
allow those Internet only PC's Access to the shares.

One way would be to use a firewall, like ZoneAlarm, that allowed you to
block or allow access by IP address. You would then assign IP addresses
to all of the computers and then set up the firewall program on each
computer as to what computers could see it and which can not.

 

[Kyuzo]

Naw that wasn't what I meant. Its all good now that I reread the original
post. I originally thought he just didn't want the computers (with user
acconts) to access shares on the other group of computers. Therefore, I
thought he could have used permissions to allow who can and cannot have
access to the shares. But the OP actually wants them to NOT be able to see
the shares, therefore I take back what I said about the share permissions.
Peace