NETGEAR ProSafe VPN Firewall FVS336G gives users full access to server shares

[edutech4schools]

I have just setup NETGEAR ProSafe VPN Firewall FVS336G in a test enviroment but when logged onto the network as a standard user through the ssl vpn I can browse to any share and open it including c$.

 

Example

I have setup a standard user named user1. this user does have local admin rights on the laptop they use.

I have created a folder and shared it.

 

shares are:

Domain admins and user2

 

security is:

domain admins, user2 and system.

 

When user1 logs in over vpn they shouldn't be able to open user2 folders but they can. When logged in locally the security works ok.

 

I have tried this as LDAP and RADIUS

 

Why is this?

[edutech4schools]

ok sorted it. Didn't realize the vpn used the local laptop account as the security for vpn remote shares. I thought it used the vpn logon account.

 

So if I logon to laptop as Dave and then log onto the VPN as Paul, once connected I can only access folders that belong to Dave and not Paul even though I was not connected to the network while logging on as Dave.