How do I restrict some computer in the network ?

[trintin7]

I have a company which have a mix of PCs and Laptop mostly are XP only some are Windows 7 and Vista.
The PCs belongs to accountants and others these have printer attached and on share with the network. These PCs contains some sensitive information that is vital to the company.
Laptops are for the sales which use only internet but they have access to those information.

My question is how do I restrict those laptops from accessing to those information but still can use internet and be able to use printer in the network.

Thanks in advance !

 

[Saga Lout]

I have a company which have a mix of PCs and Laptop mostly are XP only some are Windows 7 and Vista.
The PCs belongs to accountants and others these have printer attached and on share with the network. These PCs contains some sensitive information that is vital to the company.
Laptops are for the sales which use only internet but they have access to those information.

My question is how do I restrict those laptops from accessing to those information but still can use internet and be able to use printer in the network.

Thanks in advance !

The safest method would be to set up a second router or set of switches to network all the computers in what's known as a secured Intranet and simply allow them Internet access through the existing setup. That way, there's no crossover between the two because anyone who hacks in through the Internet cannot access the Workgroup. It's about as safe as you can get but companies generally find more sensitive data leaks out through staff thsn hackers.[/#000ff]

 

[Kewlx25]

Let me get this strait. You have information for/from Accounting shared up via Windows File Sharing and you don't want Sales to have access to it?

You should really have a structured central file storage for important information and use the "least" access method. You should NOT have file shares randomly on the network that have important info.

Segmenting your network via vLANs and ACLs would help block un-wanted file sharing, but I would recommend having ALL of your data stored on a central server with correct File ACLs applied.