Help with security settings

[Laser]

We recently installed a small peer to peer network with nine XP-Pro
Computers networked and connected to the Internet through a DSl
router/modem. One computer is used as a file server where we store files for
the various departments in separate folders. On this computer, we have added
all the users that may need to access these files remotely. This works great
for us since we can control the access to these folders from the remote
computers though XP's shares permission settings. Like I said, This works
well, except, anyone can log on to the file server computer and then have
access to all the files.

Is there any way of limiting access to folders when someone is signed on to
the local machine. Better yet, is there a way that I can restrict someone
from signing on to the local machine while still allowing them to sign on
remotely from the network?

Thanks in advance

[Alan Le Marquand [MSFT]]

Hi,

There is a "log on locally" and "Deny Logon Locally" set of rights within
the Group Policies for the local machine. By default the Users, Power Users,
Backup Operators and Administrators are granted the log on locally right.

I suggest putting all the users you current have set up into a group and add
this group to that right, then test the effects by removing the Users group
from this right. (Do not add the Users group to the Deny Logon Locally, just
remove it from the Log on Locally).

Test this and see if it helps with you situation.

--
Hope this Helps

Alan
Program Manager
TechNet Field Events

Please visit http://www.microsoft.com/technet for insights and answers

(This posting is provided "AS-IS" with no warranties and confers no rights.

"Laser" > wrote in message
...
> We recently installed a small peer to peer network with nine XP-Pro
> Computers networked and connected to the Internet through a DSl
> router/modem. One computer is used as a file server where we store files
for
> the various departments in separate folders. On this computer, we have
added
> all the users that may need to access these files remotely. This works
great
> for us since we can control the access to these folders from the remote
> computers though XP's shares permission settings. Like I said, This works
> well, except, anyone can log on to the file server computer and then have
> access to all the files.
>
> Is there any way of limiting access to folders when someone is signed on
to
> the local machine. Better yet, is there a way that I can restrict someone
> from signing on to the local machine while still allowing them to sign on
> remotely from the network?
>
> Thanks in advance
>
>
>
>