Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Windows Server 2008 R2 64-bit. Only role installed is File Server -> File Server Resource Manager. Box is member of AD. I have local admin access and can put in a ticket with domain admin if need be.

I created an SMB share and granted permissions to a domain group. This takes care of account management. However, I would like to limit access to the share to certain subnets. Is there a way to limit the access to an SMB share by IP address range/subnet? If access to individual shares cannot be configured by IP range then what about access to SMB as a whole no matter which share?

Thanks in advance for any insights you may be able to provide.

share|improve this question
up vote 2 down vote accepted

Use Windows Firewall with Advanced Security to modify the scope of the File and Printer Sharing (SMB-in) rule for the appropriate network profile to allow inbound SMB connections from the appropriate subnets.

share|improve this answer
Thanks a bunch, that worked! Will come back and vote up once I get enough rep to do so. – Reality Extractor Apr 25 '11 at 15:14
Glad to help... – joeqwerty Apr 25 '11 at 16:17

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.