Windows 10: How to Restrict network shares access for a specific domain user in all computer except a...

I have this requirement where: There is a particular domain User "Superuser1" in my AD Domain Controller for whom I want to set this below rules:Block access to network drives network shares and shared folders for this User on all workstations and allow access to the same share on a particular WorkstationFor example: Block network access for Superuser1 from all PCs connected to domain except one specific PC.This is required because the "Superuser1" has most privilege for shared folders - So I need to restrict this user account to access network shares from only one computerThere is an option

:)

 

Cannot access shared network drive


Personally, I wouldnt use Everyone. If anyone hacks into you, they have full access to everything and can demolish everything on your raid. I would rather set up accounts and access separately for each person. That way, I know who did all that damage. In the end with a little extra work, I feel more secure by using Authenticated Users.


If this helps.
step 1 create non-microsoft account and without email and address without admin rights
step 2 share a drive or folder to specific user account (if Everyone is listed, remove it)
step 3 set security > add Authenticated Users (if more than 1 account) or add specific users
step 3a remove Everyone from list
step 3b uncheck full control and write for all items listed except SYSTEM and Admin account.
step 4 right click Start > Computer Management > System Tools > Shared Folders > Shares ... to verify settings and change anything else. You can also see the number of connections to each share here.

 

How to limit Windows Sharing to one PC on a network?

Unfortunately, without having a domain and DC using AD DS or similar, I don't believe you can do the shares how you see them on a home-grade network without simply using accounts and account authorization. You need to treat and view these local accounts as a workstation ID instead of an account logged into your computer like you are now. In that respect, this would make limited access quite easy. Give the user of that computer the ID and password to access your PC on the network and they'll have access to specific shares. You'll be a mini-network admin in no time! *Big Grin

You can have access credentials saved on the PC accessing shares, reducing the need to login every time to access the share.

Another option would be to modify the share in Computer Management. Shared Folders > Shares.

Add a $ at the end of the share name to make it invisible, so you must know the location to access it. You will see examples of this as there are some default shares within Windows already setup this way.

With that you may still want to do as suggested above by newtekie1 with permissions and/or with local accounts to restrict access still so you can assign whom has access to that share.

Beyond that I don't believe there is a way to restrict via PC ID's, because each PC is its own identity, and none are registered to a central server like a domain controller, so using the PC name/ID as a network resource on your home network in the method you want isn't realistic. But if you can manage to accept and view extra created accounts (create them in Computer management too btw...then you have one window for creating and managing accounts and shares) as a PC ID, you'll be fine me thinks.

 

Restrict Network Drive Access to User

Hi Beach,



I realize the inconvenience you are experiencing with Windows 10. I will certainly help you.



This issue might occur if there network discovery option is enabled on the computer.



To assist you better, please provided us the information below:

• When you say that "kids have a local account", is the child account configured as standard user account on the computer?

I suggest you to follow the steps below to hide the network discovery of the computer in the shared network.

1. Click on Search bar.

2. Type "HomeGroup" without the quotes in the search bar and click on it.

3. Then click on Change Advanced sharing settings.

4. Expand Private.

5. Turn off network discovery.

5. Expand Guest or Public.

6. Then turn off network discovery
option.

7. Click on Save changes button.

Please get back to us with an update on issue with restricting network drives to the child account, we will be happy to help.



Thank you.