Windows defender firewall on FileServer

[stygre13]

Hi Community,

I'v an file server on Win 2k19 with shares' access right managed using group based ACLs

In addition, Id like to manage which asset can reach this file server.
Using the local Windows defender firewall, is it possible to create an rule which allow :
- All domain joined asset

AND

- A defined IP range (Legit out of domain assets)
?
Doing like, any BYOD network connected using legit auth creds will be rejected

Thanks for sharing your experiences and advices ;)

[#2]

Your BYOD network should NEVER have any access to main LAN, if it does, change it ASAP!
If it does not (because it is routed), make the ACLs on the router using DHCP reservations IPs for the few units that need to access the server