control what folders are seen when connecting over VPN

[damarious25]

Hey folks. I have quick question about a VPN set up on Win 7 Ultimate.

Folder permissions isn't an issue. As in folder A and B are shared. Permissions allow Tom access to A but not B and Joe access to B and not A.

I'm curious if I can hide folder B from Tom and hide folder A from Joe? As it stands now, if Tom connects to the network via VPN he can see both folders even though he only has access to A. I want to hide B all together from him. Is this possible or do I need a copy of Server 08 with user groups or something?

 

[MrGuvernment]

you can use a $ on the end of folder share names to hide them for anyone.

 

[damarious25]

You mean like this?:
3 users, Tom, Joe and Mary.
Tom uses folder A
Joe uses folder B
Mary just connects as proxy

User Tom logs in and sees FolderA but not FolderB so:

\\SERVER\FolderA$joe;mary #Hides FolderA from joe and mary
\\SERVER\FolderB$tom;mary #Hides FolderB from tom and mary

Or would the $ symbol mean allow sight for following users like:
\\SERVER\FolderA$tom

 

[RiDDLeRThC]

You can use the $ to hide folders even if they do have access...

Or you can use Access Based Enumeration (win2k3) to hide folders people don't have access to.

Access Based Enumeration (win2k8)

 

[da sponge]

No, a $ hides it from everyone. Just give users links to their shared folders and set the shared folder permissions so only the assigned user has access. This way, even if Tom guesses Mary's folder name, he won't see get into it.