I have a server farm consisting of all windows 2003 servers with R2

All my workstations are Windows XP professional with SP2

What I would like is to be able to limit my users access to domain shares
(specifically DFS shares) so that these shares are only accessible while
they are logged into and using one of the Terminal Servers.

I do not want these shares accessible from the XP Pro workstations.



I cannot block access to the servers from the XP workstations with firewall
or IPsec as they still need access to sysvol for policies and scripts and
printer services.



Any suggestions no matter how far out would be greatly appreciated



Thanks

I haven't tried it, but you can assign "computers" in the share
permissions. You'll have to add them as an "object type", but I don't
see any reason why it wouldn't work.


MrMiLo@nospam wrote:

Doug,

I already gave that a shot by denying permissions based on computer and it
did not seem to have any effect. I did not just try to give computer the
objects permissions as the users belong to security groups which all have
different rights from one another and they all share a farm of Terminal
Servers.

Thanks for the input.

"Doug Masters" <doug.masters@gmail.com> wrote in message
news:1151450612.812047.72400@p79g2000cwp.googlegro ups.com...