Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have created anonymous(everyone account) "hidden" shares on Windows 2003 to let our ASP.NET application access it from another server without credentials. I have added $ to share name to hide it from other users, but actually this is not solution because such shares can be easily discovered by other OS or some tools on Win. Can I restrict shared folder access by IP?

Regards, Tomas

share|improve this question
up vote 3 down vote accepted

I don't know of any way to do that short of playing with a specialized set of firewall rules; have you considered instead having the application run with particular privileges and giving that application access to the share via that privilege account? I.e., application runs as user foo, and you give foo specific access to the share or folder at the NTFS level (or share level, if you have it set so that would work; I often give shares full access to anyone but restrict everything at the filesystem level for fine-grained access control without troubleshooting interaction between shares and filesystem permissions...)

share|improve this answer
I have used your suggestion and it works flawless. Thank you Bart. – Tomas May 10 '10 at 13:58
You're welcome :-) – Bart Silverstrim May 10 '10 at 14:01

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.