Looking for a Windows based solution.
- A standalone WS 2012R2 located on NETWORK A is sharing a folder with R/W access through a local user.
- A segregated NETWORK B contains user PCs, some joined to NETWORK B’s WS 2019 AD, others configured as standalone.
- NETWORKS A and B are connected via a firewall/router appliance.
- Make the share on the 2012R2 server in NETWORK A available as READ-ONLY to user PCs on NETWORK B.
- Both domain-joined and standalone user PCs on NETWORK B need to have access to the share.
- Guarantee that users’ access is READ-ONLY.
- Users need to be able to launch applications directly from the READ-ONLY share/mapped drive.
- No changes can be made to the Windows 2012R2 server.
- Users should not be able to bypass the RO control and map the share as RW.
Basically we need to either re-share the WS 2012R2 share inside NETWORK B but this time as READ-ONLY, or somehow configure user PCs to map the RW share RO. However, since some user PCs are not domain-joined, we can’t simply let them “see” the external share (requirement 3).
A Linux machine CIFS-mounts the WS2012R2 share and exports it as RO using samba. This works, but introduces another platform which is not desirable. Also, it is somewhat slower than a true Windows solution, and reparse points get “lost”.
Attempted so far:
- SMB sharing the SMB share
- mklink /d the share and then exporting the link
- SUBST command
- Various chains of the above 3
- DFS namespaces
- FTP sharing the SMB share (does not work well as a true map)
- NFS sharing the SMB share (windows keeps dereferencing all the way to the network path, resulting in failure)
- Share between a Hyper-V host and a VM
- Building SAMBA on Windows. Got quite far, but still unable to complete the build. Even if it builds, not hopeful that it will work correctly on Windows (unsupported)
- Proxying the requests via a router. No luck so far.