Hi,

We have in the office Windows 2003 server running and users in a local domain, we are going to add some users (comercial people).
I would like to seperate them, so when they conect themself from the outside using VPN they can only see the directories which are in the group "comercial".
I am not sure how to do this. I thought of just add in the AD a group called "comercial" and then add users (relate them to the group "comercial") and then the directories which they may see, give permission to the group "comercial".
Then in every portable they have we make a user and a workgroup "comercial".(portable are Windowx XP Home

Am I doing this right? Or is there soemthing else I have to do? Or did I missed something?

Any help is welcome
Johny