Sign up ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

we have got a Windows server runnung with 5 shares. To increase VPN security I'd like to forbid access to one of the shares from VPN-Network (10.8..). Is this possible via Windows firewall? What are the other possibilities? Can the machine get a second IP and share the one share through this particular IP, but not through the other?

Best Regards

share|improve this question

1 Answer 1

This cannot be done with the level of specificity that you require. The sticky wicket is this:

I'd like to forbid access to one of the shares

You cannot create rules that restrict access to a specific share based on IP address/subnet. You can restrict share access by computer account and standard Windows group permissions, but that doesn't help you unless the computers that are coming through the VPN are both domain joined and also never simultaneously show up on the local network (they'd be restricted from accessing the share wether they were coming through the VPN or on the LAN).

What you might need to do is separate that one share on to its own file server. From there, you can restrict access to the server as a whole based on subnets using Windows Firewall (or IPSec rules, but that's ugly and unnecessary).

share|improve this answer
is there a way to share a specific share on a specific LAN connection? – Stasik Jun 19 '13 at 9:16
@Stasik Nope, not possible. – Wesley Jun 19 '13 at 14:51

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.