How to hide a workgroup from the network !

Toggle sidebar Toggle sidebar
G

Guest

Guest
Archived from groups: microsoft.public.windowsxp.security_admin (More info?)

Dear Sir,
Say i have 5 PC's .. (A B C D E )
A & B in a work group named (WORKGROUP)
C D & E in a work group named (MSHOME)
all are connected to the same Switch & sharing the same internet connection
"DSL"
how could i hide (MSHOME) from this network with giving all its members (C
D & E) the ability to browse the another workgroup ?
is it possible ?
thanx in advance
 
Archived from groups: microsoft.public.windowsxp.security_admin (More info?)

The purpose of a workgroup is not to isolate computers, but rather just to
group them together for quicker and easier access to resources.

To truly isolate or disable browsing between MSHOME and WORKGROUP, you need
to segment your device workgroups subnets by using a switch with different
VLANs and ACLs that filter 445/TCP from VLAN-MSHOME from VLAN-WORKGROUP, thus
breaking Microsoft Netbios over IP.

"Ahmad Sabry" wrote:

> Dear Sir,
> Say i have 5 PC's .. (A B C D E )
> A & B in a work group named (WORKGROUP)
> C D & E in a work group named (MSHOME)
> all are connected to the same Switch & sharing the same internet connection
> "DSL"
> how could i hide (MSHOME) from this network with giving all its members (C
> D & E) the ability to browse the another workgroup ?
> is it possible ?
> thanx in advance
>
>
>
 
Archived from groups: microsoft.public.windowsxp.security_admin (More info?)

Thanx mr. Phil,
But i can't manually configure IP's over my network
it's the task of my Dsl Modem "DHCP" or ican't get internet sharing over my
network
i've no static IP account .. only dynamic,
does your answer differs then ? !!
Best Regards... from Cairo
A.S
"Phil Agcaoili" <PhilAgcaoili@discussions.microsoft.com> wrote in message
news:BFF52053-0CE8-4B85-B30A-2B7A20CB7D0D@microsoft.com...
> The purpose of a workgroup is not to isolate computers, but rather just to
> group them together for quicker and easier access to resources.
>
> To truly isolate or disable browsing between MSHOME and WORKGROUP, you
> need
> to segment your device workgroups subnets by using a switch with different
> VLANs and ACLs that filter 445/TCP from VLAN-MSHOME from VLAN-WORKGROUP,
> thus
> breaking Microsoft Netbios over IP.
>
> "Ahmad Sabry" wrote:
>
>> Dear Sir,
>> Say i have 5 PC's .. (A B C D E )
>> A & B in a work group named (WORKGROUP)
>> C D & E in a work group named (MSHOME)
>> all are connected to the same Switch & sharing the same internet
>> connection
>> "DSL"
>> how could i hide (MSHOME) from this network with giving all its members
>> (C
>> D & E) the ability to browse the another workgroup ?
>> is it possible ?
>> thanx in advance
>>
>>
>>
 
Archived from groups: microsoft.public.windowsxp.security_admin (More info?)

My answer would still be the same.

Here's how the diagram would look:

Internet-----DSL modem----Switch (or router that you need to buy and place
in the network)-------------VLAN 1 (MSHOME devices)
|
|
VLAN2 (WORKGROUP devices)

You need more equipment than what you have inorder to do what you're asking.

Let me know if you have more questions.

"Ahmad Sabry" wrote:

> Thanx mr. Phil,
> But i can't manually configure IP's over my network
> it's the task of my Dsl Modem "DHCP" or ican't get internet sharing over my
> network
> i've no static IP account .. only dynamic,
> does your answer differs then ? !!
> Best Regards... from Cairo
> A.S
> "Phil Agcaoili" <PhilAgcaoili@discussions.microsoft.com> wrote in message
> news:BFF52053-0CE8-4B85-B30A-2B7A20CB7D0D@microsoft.com...
> > The purpose of a workgroup is not to isolate computers, but rather just to
> > group them together for quicker and easier access to resources.
> >
> > To truly isolate or disable browsing between MSHOME and WORKGROUP, you
> > need
> > to segment your device workgroups subnets by using a switch with different
> > VLANs and ACLs that filter 445/TCP from VLAN-MSHOME from VLAN-WORKGROUP,
> > thus
> > breaking Microsoft Netbios over IP.
> >
> > "Ahmad Sabry" wrote:
> >
> >> Dear Sir,
> >> Say i have 5 PC's .. (A B C D E )
> >> A & B in a work group named (WORKGROUP)
> >> C D & E in a work group named (MSHOME)
> >> all are connected to the same Switch & sharing the same internet
> >> connection
> >> "DSL"
> >> how could i hide (MSHOME) from this network with giving all its members
> >> (C
> >> D & E) the ability to browse the another workgroup ?
> >> is it possible ?
> >> thanx in advance
> >>
> >>
> >>
>
>
>
 
Archived from groups: microsoft.public.windowsxp.security_admin (More info?)

My answer would remain the same.

This is how it would look:

VLAN1 (MSHOME devices)
|
Internet----DSL Modem---Switch or router (you need to buy and install this)
|
VLAN2 (WORKGROUP devices)

What you are asking to do requires additional equipment to segment your
network. You can do it with either a router or a switch.

Let me know if you have any more questions.

"Ahmad Sabry" wrote:

> Thanx mr. Phil,
> But i can't manually configure IP's over my network
> it's the task of my Dsl Modem "DHCP" or ican't get internet sharing over my
> network
> i've no static IP account .. only dynamic,
> does your answer differs then ? !!
> Best Regards... from Cairo
> A.S
> "Phil Agcaoili" <PhilAgcaoili@discussions.microsoft.com> wrote in message
> news:BFF52053-0CE8-4B85-B30A-2B7A20CB7D0D@microsoft.com...
> > The purpose of a workgroup is not to isolate computers, but rather just to
> > group them together for quicker and easier access to resources.
> >
> > To truly isolate or disable browsing between MSHOME and WORKGROUP, you
> > need
> > to segment your device workgroups subnets by using a switch with different
> > VLANs and ACLs that filter 445/TCP from VLAN-MSHOME from VLAN-WORKGROUP,
> > thus
> > breaking Microsoft Netbios over IP.
> >
> > "Ahmad Sabry" wrote:
> >
> >> Dear Sir,
> >> Say i have 5 PC's .. (A B C D E )
> >> A & B in a work group named (WORKGROUP)
> >> C D & E in a work group named (MSHOME)
> >> all are connected to the same Switch & sharing the same internet
> >> connection
> >> "DSL"
> >> how could i hide (MSHOME) from this network with giving all its members
> >> (C
> >> D & E) the ability to browse the another workgroup ?
> >> is it possible ?
> >> thanx in advance
> >>
> >>
> >>
>
>
>
 
Archived from groups: microsoft.public.windowsxp.security_admin (More info?)

Welcome Mr. phil
I'm really very thankfull for you,
But may you be more patient with me sir ? !!
coz i've a lot to understand

DEVICES I'VE:
Switch 5 ports
Hub 8 port "not using it"
Dsl modem with RJ45
7 PC's "only 4 connected to internet"

my network looking like this

PC1 PC2
| |
Internet ---- My Dsl Modem ---> -----Switch----
| |
PC3 PC4
PC1 it's DHCP IP (10.0.0.1)
PC2 it's DHCP IP (10.0.0.2)
PC3 it's DHCP IP (10.0.0.3)
PC4 it's DHCP IP (10.0.0.4)
subnet mask : 255.255.255.0 , for all are the same
I've the following questions:

1- does the hardware solution i've to get "as you said" supposed to support
specific options ? ... all my problem i want to join all .. but prevent some
to see even the others' computer.

2- i didn't get the pharase "ACLs that filter 445/TCP "

3- if i configured my network IP's .. they doesn't connect to the internet
... although i've installed Win98 on Vmware with its own dynamic IP ..
like: 192.168.0.1 (255.255.255.0) & it accesses the internet simply.
how can i control this .. i mean to configure all pcs manually & enable them
to conect to the internet too.

4- does the switch divide the speed of 256KB equally for the 4 connected
PC's (64KB each) in case they all are connected ?

5- If i pluged cable from the switch to my 8 port Hub, (then my 5 port
switch will carry only 3 PC's) will the speed then will be divided on 10
25.6KB per PC ? -((in case all ports are connected with pc's))-or the hub
will divide the 64KB that it otained from the switch on the 7 PC's connected
to it ?

PC1 PC2
PC4
| |
|
Internet ---- My Dsl Modem ---> -----Switch---- ----- 8 Hub ------------
>connected with 6 PC's
|
PC3

6- my network doesn't require a server (altough it will solve alot of these
problems) , so, without installing an isa server .. how could i control the
speed to each PC ?

7- Will nating play a role in this statement , if yes .. how can I do it ?

thanx mr. phil .. i wish i didn't overburden your time .. but to here we've
a say (( the question is 50% of knowledge))











>> "Phil Agcaoili" <PhilAgcaoili@discussions.microsoft.com> wrote in message
>> news:BFF52053-0CE8-4B85-B30A-2B7A20CB7D0D@microsoft.com...
>> > The purpose of a workgroup is not to isolate computers, but rather just
>> > to
>> > group them together for quicker and easier access to resources.
>> >
>> > To truly isolate or disable browsing between MSHOME and WORKGROUP, you
>> > need
>> > to segment your device workgroups subnets by using a switch with
>> > different
>> > VLANs and ACLs that filter 445/TCP from VLAN-MSHOME from
>> > VLAN-WORKGROUP,
>> > thus
>> > breaking Microsoft Netbios over IP.
 
You must log in or register to reply here.

TRENDING THREADS

Latest posts

Moderators online

Share this page

COMPANY
RESOURCES
FOLLOW
Top Bottom