Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

My network scenario is:

Two location connected each other through Wireless towers. 1st network ip address are to 2nd network ip address are to

Both location using their own ACTIVE DIRECTORY (MS SERVER 2008) and share their data with each other network through file sharing.

My Problem is that every single client can explore the whole network. by simply typing \computername. i want to implement some restriction on network regarding file sharing.

i want to restrict 1st Network Clients to open 2nd network Computer or server. Is there have any Group Policy or Folder permission scenario that i implement on my both network..

share|improve this question
What does "both location using their own ACTIVE DIRECTORY" mean? Different forest, different domain or just different DCs? – HopelessN00b Jun 27 '12 at 12:17
Just different DCs – Usman Jun 28 '12 at 9:33

I suppose that you could do something involving Group Policy settings for the Windows Firewall, but you'd really be better served with a firewall device limiting the traffic between different parts of the network to achieve your goal of compartmentalization.

Your network addresses look suspiciously like they're both part of the same /24 network. That's going to make using a layer 3 device, like a firewall, problematic.

I also strongly suspect that using well thought-out access control lists (ACLs) on shared files and folders could probably accomplish a lot of what you're looking for without having to resort to network-level filtering.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.