I need to block access to Windows-shares in network

pingu · 11-23-2005, 09:51 AM

I'm trying to block access to shared resources on a Windows-server.
This should be ports 139 & 445 (both TCP) but blocking those doesn't help at all.
Blocking 135-139 & 445 TCP and UDP means noone can login... (This is an AD-domain, 2 domain controllers one with shared resources such as "home".)
We're using a port/process-blocking application that works well for blocking Internet, mail etc.
What ports can I block to disable access to Windows shares?

Keruskerfuerst · 11-23-2005, 10:22 AM

You can gives acess restrictions to the windows shares by changing the file permissions or the the mount options.

pingu · 11-24-2005, 01:29 AM

That ain't possible - you see, this is for a school.
We have 700 students each with a personal share, and then lots of common resources needed for daily work.
We need a solution where teachers can block access to shares for a class when so needed, for example during exams. We do not allow local logins, also they need access to network-printers.

Any other ideas?