I recently segmented a network and the only hosts that are accessable from every subnet are the AD-Server and the fileserver. Now I want to limit the access to specific shares on that servers to a list of subnets. For example the project folders don't need to be accessable from the laboratory network.
It seems like this is not possible with the capabilities windows server 2012 offers. I can of cause limit the access to port 445 by subnet but thats not what I want. I need a way to filter on the protocol level or sth. like that. Is there a state of the art way to do this?