How do you block specific computers on a windows network from accessing shared folders?

[gabemcg]

I let my neighbor leech off my wireless for a few bucks a month, but I don't want him to have access to any of the shared folders or files on my network... How can I block windows file sharing to/from his computer, but have it still freely available for the other PC's on my network??

 

[JackMDS]

If you allow him to use your Internet connetion, put software Firewall on each computer, and put your computers' IPs in the Trusted Zone, Blocking any other IP.

Otherwise, configure the Wireless security, and he would Not be able to leech On.

Wireless Security for the Home User.

 

[gabemcg]

cool, thanks.

I thought their might be a better way to do it with file permissions, but I suppose a firewall works just as well...

 

[Genx87]

You can do it with permissions however in theory he could crack it eventually. Your best bet is the firewall to completely hide your computers from him.

 

[RebateMonger]

A reliable way to do this is to get a second WiFi router. Hook its WAN port to the current router's LAN port. Connect all your wired PCs to the LAN ports of the new router.

Now set your own, private, encryption on the wireless section of the new WiFi router. Use WPA or better encryption. Use this new, private, WiFi network for all your wireless PCs. This will keep your neighbor off your "private" network, by the use of WiFi encryption and the use of (one-way) NAT on the new WiFi router.

 

[gabemcg]

Originally posted by: RebateMonger
A reliable way to do this is to get a second WiFi router. Hook its WAN port to the current router's LAN port. Connect all your wired PCs to the LAN ports of the new router.

Now set your own, private, encryption on the wireless section of the new WiFi router. Use WPA or better encryption. Use this new, private, WiFi network for all your wireless PCs. This will keep your neighbor off your "private" network, by the use of WiFi encryption and the use of (one-way) NAT on the new WiFi router.

Thats a good Idea, I'd be more interested in learning how to do this with permissions, than try to figure out how to configure firewalls on 5+ Pc's, a mac, a linux laptop, three xbox 1, one 360, and a file server...

Can anyone steer me in the right direction for changing the permissions on my shares to block a specific ip?

 

[RebateMonger]

You can't set NTFS Share security by IP address. Normally, it's done by User.

 

[Deathlord]

I checked out that guide and one if its recommendations was using Netbui....I about dropped my lunch...lol.

Best bet is to go the Permission route....and not just share permissions but also use NTFS permissions (security tab). NTFS overrides share permissions.

In my home network I set up the shares with Everyone - Full Control and then go to the Security Tab and remove everyone (or you can give everyone - list) and then add the accounts I want to have access. Since I am not running a Active Directory domain, I am sure that the accounts are the same on all computers. it can be administrator or whatever and give that account the required permissions. So, if you have an outside person sharing your wireless that is on your same IP subnet, if they happen to "find" a share they will be prompted for authentication and will have to know your user/pass info.

Now, depending upon how savvy your neighbors are this should be suffice.


UPDATE: firewalls are great but more than likely he would have to open the RPC ports required for sharing so this makes it almost moot, unless he goes in and specified specific IP addresses which could be a problem if DHCP is being used to dole out IP's. In my case I use Zone Alarm and add my subnet as trusted.