preventing intra-site resource mapping ?

[Ste]

A domain hase many sites, some slow-linked and all defined in AD sites
& server
Is there a way to prevent users that logs to the domain to access
network shares on file servers of different sites than the one their
client belong?

TIA
Ste

 

[Alex Tarata]

Yes, use share and NTFS (if volumes on servers are formated with NTFS)
permissions.

 

[Ste]

Hello Alex,
Trying to be clearer:

1. W2k domain ItalyDomain.it has a Rome site and a Milan site
2. Rome site has its own w2k DC and FS
Milan site has its own w2k DC and FS
3. User Alex in Rome logs to ItalyDomain.com and has access to shares on Rome FS
4. User Alex comes in Milan, logs to ItalyDomain.com and maps shares on Rome FS

Can I stop/control this?

TIA
Ste

 

[Eric Chamberlain, CISSP]

Use your firewall to block traffic external to the site.

--
Eric Chamberlain, CISSP
Campus Active Directory Architect
Central Computing Services
University of California, Berkeley
http://calnetad.berkeley.edu