We've recieved an interesting query from one of our users. They want to restrict access to a folder on a file server to on Premises only. At the moment users can access the data remotely from our Terminal server farm (which is the problem). Ordinarily I would use a Firewall to restrict access to the server but the problem is that the file server is used for other shares which the user are allowed access to from off premises via a terminal server and my hundreds of other users to which this scenario does not apply. Any help would be appreciated. Many thanks

Hello, i don't like working with deny but did you try to set a deny for the computername on the required folder? I would built a lab machine and test this way, if it works you can configure it on the production. Best regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

Should have said, this was the first thing i tried and this does not work.

Hi, Please try the following configuration: 1. Block access to the folder by default. 2. Create a logon script which will run after user logon finished. 3. This script will check environment variable SESSIONNAME, if it’s not Console, it will not change folder permission. (We may need to provide administrative account information in the script so that we need to encrypted this script.) If SESSIONNAME is Console, it will change folder permission to allow the access. Script Encoder Overview http://msdn.microsoft.com/en-us/library/d14c8zsc%28VS.85%29.aspx Thanks. This posting is provided "AS IS" with no warranties, and confers no rights. Please remember to click "Mark as Answer" on the post that helps you, and to click "Unmark as Answer" if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Hi, Do you need any other assistance? If there is anything we can do for you, please let us know. Thanks. This posting is provided "AS IS" with no warranties, and confers no rights. Please remember to click "Mark as Answer" on the post that helps you, and to click "Unmark as Answer" if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.