Prevent access to server via Wireless

[Chuckster]

Hi,

 

I have a 3Com AirConnect 9500 Access Point. My problem is, is that the laptops that are going to use this aren't networked since they're completely standalone.

 

What I want to know is how do i prevent non-networked laptops having access to the server and other things. For example, I don't want them to be able go to the Run Command and type in the servername and be presented with the Login dialog box asking for the username and password.

 

Is there any way I can prevent laptop users from doing this?

[Ric_]

Put your non-networked laptops on a separate VLAN which only has access top those resources that you want them to have. This can either be done by having the AP on a separate VLAN or setting up multiple SSIDs on different VLANs (I think your AP can do this).

[Chuckster]

The AP has an option that reads "Isolate all Profiles (SSIDs) from each other" and under that is a sub-option that reads "Use VLAN (802.1Q) standard"

 

Would this do it?

[ssiruuk2]

No thats not what your after. You need to configure some vlans on your switch(es) and assign your wireless into a seperate vlan to your servers. You can then restrict exactly what traffic can pass from the wireless vlan to your servers.

 

Of course this is assuming that you have managed switches that support vlans!!

[Michael]

You can't prevent this from happening, but providing your permissions are correct you have nothing to worry about. Alternatively, have a look at Access-Based Enumeration (available in Server 2003 R2) which allows you to view shares based on ACLs (Access Control Lists).