Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

Windows Server 2008 R2 64-bit. Only role installed is File Server -> File Server Resource Manager. Box is member of AD. I have local admin access and can put in a ticket with domain admin if need be.

I created an SMB share and granted permissions to a domain group. This takes care of account management. However, I would like to limit access to the share to certain subnets. Is there a way to limit the access to an SMB share by IP address range/subnet? If access to individual shares cannot be configured by IP range then what about access to SMB as a whole no matter which share?

Thanks in advance for any insights you may be able to provide.

share|improve this question

1 Answer 1

up vote 2 down vote accepted

Use Windows Firewall with Advanced Security to modify the scope of the File and Printer Sharing (SMB-in) rule for the appropriate network profile to allow inbound SMB connections from the appropriate subnets.

share|improve this answer
    
Thanks a bunch, that worked! Will come back and vote up once I get enough rep to do so. –  Reality Extractor Apr 25 '11 at 15:14
    
Glad to help... –  joeqwerty Apr 25 '11 at 16:17

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.