DOCUMENT:Q80860  30-JUL-2001  [lanman]
TITLE   :Uses of the LANMAN.INI RASLANNETS Entry
PRODUCT :Microsoft LAN Manager
PROD/VER:
OPER/SYS:
KEYWORDS:

======================================================================
SUMMARY
=======

The ability to restrict remote users to specified networks is a security feature
that is not well known. This article describes security features made possible
through the RASLANNETS entry in the LANMAN.INI file.

MORE INFORMATION
================

The example below illustrates why an administrator may want to restrict remote
users to a specific server network.

Example
-------

A development group is using Remote Access Service (RAS) to support split-site
development in the following manner:

       ---------------------
       |RAS, SQL, LM server|    \\SERVERNAME
       ---------------------
                ||

----Loopback----||---------------Corp Net-------------

where "servername" is a LAN Manager and a SQL Server that the group is using for
tracking bugs and for file sharing with a codeveloper. The codeveloper uses RAS
that runs on the server to access SQL Server and the files on the server. The
server is configured to operate over the following two networks:

   Loopback network
   Corporate network

The RASLANNET LANMAN.INI parameter is set so that the developer can access
resources only in the loopback network. This parameter enables the developer to
copy files to \\SERVERNAME and access the SQL RAID database; however, it
prevents the developer from using resources on the corporate network if he or
she accesses the network from a remote location.

If it becomes necessary for the developer to access more machines, the loopback
network can be changed to be a small LAN; it is not necessary to use a loopback
network, and place all other machines on that network.

Additional query words: 2.10 2.10a 2.20 RASLANNETS security

======================================================================
Keywords          :  

=============================================================================

THE INFORMATION PROVIDED IN THE MICROSOFT KNOWLEDGE BASE IS
PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND.  MICROSOFT DISCLAIMS
ALL WARRANTIES, EITHER EXPRESS OR IMPLIED, INCLUDING THE WARRANTIES
OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE.  IN NO
EVENT SHALL MICROSOFT CORPORATION OR ITS SUPPLIERS BE LIABLE FOR
ANY DAMAGES WHATSOEVER INCLUDING DIRECT, INDIRECT, INCIDENTAL,
CONSEQUENTIAL, LOSS OF BUSINESS PROFITS OR SPECIAL DAMAGES, EVEN IF
MICROSOFT CORPORATION OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE
POSSIBILITY OF SUCH DAMAGES.  SOME STATES DO NOT ALLOW THE EXCLUSION
OR LIMITATION OF LIABILITY FOR CONSEQUENTIAL OR INCIDENTAL DAMAGES
SO THE FOREGOING LIMITATION MAY NOT APPLY.

Copyright Microsoft Corporation 2001.