I guess I'm not following all the operational constraints you have then.

If the one group is untrusted (and depending on the degree of that lack of
trust) then likely the only way you can get comfortable with it, as you've
defined the problem is with a second server (or NAS).  You're still going to
have the possibility that someone in the trusted group places something that
is on the server they normally access on the server that the untrusted group
accesses.  Is that a concern you're trying to mitigate?
On Tue, Sep 20, 2011 at 10:49 AM, Paul Hutchings
<[email protected]>wrote:

>  The data’s a little too confidential for the cloud, huge “what if” but
> we’d prefer having it here so at least any issue is entirely on us.
>
> ****
>
> *From:* Jonathan Link [mailto:[email protected]]
> *Sent:* 20 September 2011 15:44
>
> *To:* NT System Admin Issues
> *Subject:* Re: Best way to restrict access to file server?****
>
> ** **
>
> How about something like Dropbox (for Teams)?****
>
> On Tue, Sep 20, 2011 at 10:40 AM, Paul Hutchings <
> [email protected]> wrote:****
>
> The issue there is that I can stop them getting to the LAN using a
> firewall, but they do need access to the server and if that is compromised
> it has access to the LAN...
>
> I feel a bit like I'm over-thinking it, but it's an interesting issue.
>
> Paul****
>
>
> -----Original Message-----
> From: Dan Bartley [mailto:[email protected]]****
>
> Sent: 20 September 2011 15:05
> To: NT System Admin Issues
> Subject: RE: Best way to restrict access to file server?
>
> VLANs on the switch.
>
> Best Regards,
>
> Dan Bartley
>
>
>
> -----Original Message-----
> From: Kurt Buff [mailto:[email protected]]
> Sent: Tuesday, September 20, 2011 10:01
> To: NT System Admin Issues
> Subject: Re: Best way to restrict access to file server?
>
> I think IPSec is a pretty cool approach - Have never tried that, though.
>
> On Mon, Sep 19, 2011 at 14:16, Brian Desmond <[email protected]>
> wrote:
> > IPSec or 802.1x come to mind.
> >
> >
> >
> > Thanks,
> >
> > Brian Desmond
> >
> > [email protected]
> >
> >
> >
> > w ? 312.625.1438 | c?? ? 312.731.3132
> >
> >
> >
> > From: Paul Hutchings [mailto:[email protected]]
> > Sent: Monday, September 19, 2011 12:26 PM
> >
> > To: NT System Admin Issues
> > Subject: Best way to restrict access to file server?
> >
> >
> >
> > I think there are a few ways to skin this cat so I?m throwing it open
> > for any views on the pros and cons of each.
> >
> >
> >
> > An office, network ports are wall mounted and all go back to a central
> > comms cupboard.
> >
> >
> >
> > In the office are two groups of people.
> >
> >
> >
> > The two groups need an area where they can store/share files, but
> > whilst one group has access to the regular LAN one group is untrusted
> > so we want them as far away from the regular LAN as possible.
> >
> >
> >
> > How would you do it?
> >
> > ________________________________
> >
> > MIRA Ltd
> >
> >
> >
> > Watling Street, Nuneaton, Warwickshire, CV10 0TU, England
> >
> > Registered in England and Wales No. 402570
> >
> > VAT Registration ?GB?100 1464 84
> >
> >
> >
> > The contents of this e-mail are confidential and are solely for the
> > use of the intended recipient. ?If you receive this e-mail in error,
> > please delete it and notify us either by e-mail, telephone or fax. ?
> > You should not copy, forward or otherwise disclose the content of the
> > e-mail as this is prohibited.
> >
> > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
> > <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>? ~
> >
> > ---
> > To manage subscriptions click here:
> > http://lyris.sunbelt-software.com/read/my_forums/
> > or send an email to [email protected]
> > with the body: unsubscribe ntsysadmin
> >
> > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
> > <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>? ~
> >
> > ---
> > To manage subscriptions click here:
> > http://lyris.sunbelt-software.com/read/my_forums/
> > or send an email to [email protected]
> > with the body: unsubscribe ntsysadmin
>
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <
> http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~
>
> ---
> To manage subscriptions click here:
> http://lyris.sunbelt-software.com/read/my_forums/
> or send an email to [email protected]
> with the body: unsubscribe ntsysadmin
>
>
>
> CONFIDENTIALITY NOTICE***The information contained in this message may be
> privileged, confidential, and protected from disclosure. If the reader of
> this message is not the intended recipient, or any employee or agent
> responsible for delivering this message to the intended recipient, you are
> hereby notified that any dissemination, distribution, or copying of this
> communication is strictly prohibited. If you have received this
> communication in error, please notify us immediately by replying to the
> message and deleting it from your computer. Thank you.
>
>
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <
> http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~
>
> ---
> To manage subscriptions click here:
> http://lyris.sunbelt-software.com/read/my_forums/
> or send an email to [email protected]
> with the body: unsubscribe ntsysadmin
>
>
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~
>
> ---
> To manage subscriptions click here:
> http://lyris.sunbelt-software.com/read/my_forums/
> or send an email to [email protected]
> with the body: unsubscribe ntsysadmin****
>
> ** **
>
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~
>
> ---
> To manage subscriptions click here:
> http://lyris.sunbelt-software.com/read/my_forums/
> or send an email to [email protected]
> with the body: unsubscribe ntsysadmin****
>
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~
>
> ---
> To manage subscriptions click here:
> http://lyris.sunbelt-software.com/read/my_forums/
> or send an email to [email protected]
> with the body: unsubscribe ntsysadmin
>

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to [email protected]
with the body: unsubscribe ntsysadmin

Reply via email to