We have domain network. For a particular project we have installed standalone 2003 server in the network. Certain users are remotely login to this server through VPN. These users have administrative privilege in this server. How can we restrict these users accessing our domain shares and other P.Cs from the 2003 server .

Hi, > How can we restrict these users accessing our domain shares and other P.Cs from the 2003 server . User access domain shares or other PCs use their own user credential, nothing to do with the logged on computer. That means user can access domain shares or other PCs form any computer if they have access privilege and network is connected. So I think you should put that standalone 2003 server into individual network segment, and configure ACL on your switch. Im not familiar with network switch configuration, you can ask help form your network engineer. Hope this helps, for more information please refer to following MS articles: Logon and Authentication Technologies http://technet.microsoft.com/en-us/library/cc780455(v=WS.10).aspx Configure the Network Level Authentication Setting for a Terminal Server http://technet.microsoft.com/en-us/library/cc742818(v=WS.10).aspx Lawrence TechNet Community Support