Solved

Open files stored on different subnet

Posted on 2009-04-07
3
153 Views
Last Modified: 2012-05-06
Can anyone offer a solution to allow students XP laptops on my network, with a 10.18.x.x address, to open read only files stored in a shared folder on a server with a 10.4.x.x address? i have been told not to add another network card to server (it's a win2003 DC) and FTP doesn't really work without copying the file to laptop first which isn't practical.

thanks 4 any ideas.
0
Comment
Question by:Pete
  • 2
3 Comments
 
LVL 16

Accepted Solution

by:
ccomley earned 250 total points
Comment Utility
You can "logically" add a second "card" to the server by adding a second network address to the existing card.

In the Properties page for the NIC, click on TCP/IP V4, Properties, you'll see where it's been assigned 10.4.1.2 (e.g.) and netmask and gateway. Now click on Advanced. You can add a *second* Ip address here, so add 10.18.3.4 (say), and the suitable netmask. You can also add gateways but you don't need to, the server will continue to access the outside world via the Default Gateway it's already been given, AND it now knows how to talk to anyone on 10.18.*.*, but it doesn't need to know about any gateway that may be on 10.18 net and giving it one may cause strange effects. (Unless you WANT it to be able to useboth gateways, but that takes more planning).

0
 
LVL 1

Author Comment

by:Pete
Comment Utility
will there be any kind of routing through that server and it's new 10.18.x.x  IP address into other shares (or anything else) on the 10.4.x.x network?
on the same issue what NTFS permissions do I need to REMOVE on a shared folder to prevent users not in an 'allowed' group accessing it (everyone\authenticated users?)
 
thanks for the reply
0
 
LVL 16

Expert Comment

by:ccomley
Comment Utility
NT ll route between networks - check the routing table (command prompt- ROUTE PRINT) - any routes you don't WANT it to act upon, remove with the ROUTE command.

Permission wise, the easiest way to protect a given Share is to remove the "domain\users" group from it, to do this, you need to go into Advancecd, click the box to STOP it "inheriting" permissions frm above, chooseto "copy" the current perms. When it's finished, remove domain/users, then manually add back in any actual users (or groups) you DO want to be able to use the share.

0

Featured Post

Why You Should Analyze Threat Actor TTPs

After years of analyzing threat actor behavior, it’s become clear that at any given time there are specific tactics, techniques, and procedures (TTPs) that are particularly prevalent. By analyzing and understanding these TTPs, you can dramatically enhance your security program.

Join & Write a Comment

Quality of Service (QoS) options are nearly endless when it comes to networks today. This article is merely one example of how it can be handled in a hub-n-spoke design using a 3-tier configuration.
Even if you have implemented a Mobile Device Management solution company wide, it is a good idea to make sure you are taking into account all of the major risks to your electronic protected health information (ePHI).
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.
This video gives you a great overview about bandwidth monitoring with SNMP and WMI with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're looking for how to monitor bandwidth using netflow or packet s…

771 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now