How can I hide a workgroup???? 1

[Ssshaker]

Hi,
I am looking after a network of 12 computers split into two workgroups, admin and users.

I want admin to see all computers with full administration rights but I don't want the "users" group to see the "admin" workgroup at all. I want them to be able to access all computers in their own workgroup only.

Is there any way I can hide that workgroup?

Admin should be using passwords to protect their stuff but they don't want passwords at all. I guess that would be the easiest and best way.
Any help much appreciated.

 

[bcastner]

http://snakefoot.fateback.com/tweak/winnt/sharing.html#HIDE_SERVER

 

[Ssshaker]

Hi bcastner... thanks for that hint.

It appears after reading the links that this solution will hide the computer from all other computers. It isn't a client/server network only peer to peer and I need all computers on the "admin" workgroup to see each other as they share different resources around.... printers, file swapping, etc.

The 6 computers in "user" workgroup are basically for Internet access but it is most important they cannot access the other workgroup. They won't be sharing resources as much either.

I was hoping to find some way to simply hide the "admin" workgroup totally from the "users". I thought I remembered seeing something about Power Toys enabling a user to hide a network?

Anyway thanks again

 

[bcastner]

It is an all or nothing proposition as far as something like My Network Places is concerned.

Rethink the problem in terms of straight Windows security. It matters little if a non-Admin can "see" a share; what is important is whether they can access the share.

 

[Ssshaker]

Hi again bc,
Yes you are right. Makes zero difference if they can't touch.
I think I will suggest to my client to use a good password even if all users in "admin" use the same password.
Again...thanks

 

[Ssshaker]

I'm back again.
I had a suggestion put to me to use a firewall with static address' and simply block everything not in the range of the "admin" workgroup. So simple but should be effective.
Thanks bc so I have two options now.
Cheers

 

[bcastner]

If the router supports discrimination of VLAN assignments, go for it.

I was approaching the issue completely from the software side of things.

The Windows native security models for controlling access are in fact quite good. Let them see the share, but there are in the native Windows model security tools to ensure that nothing can happen unless you allow it.

 

[bcastner]

And I should mention that you could use IPSEC policies. Here is one example:

http://www.petri.co.il/block_web_browsing_with_ipsec.htm

While not completely on point to your original question, it does show an additional feature of the OS that can be modified for your setting.

 

[Ssshaker]

Phew! So many options. Just goes to show how much underlying stuff is available to those who want to delve deep.
Again thanks BC for the many times you have helped me.

 

[bcastner]

Less is more, small is beautiful, and keep it simple.

My best Holiday wishes to you, Ssshaker

Bill Castner

 

[Ssshaker]

Thanks BC and the same to you