How to Restrict Ping, Network Access of Domain Computers from Workgroup

Hi All,

I am facing the following scenario to implement in our enviroment.

         1. Restrict Ping, Network share access from Workgroup Computer to Domain Computers. The same should allow only for Domain Computers.

I have implemented Deny ping from workgroup using IPsec group policy and it's pinging for Domain Computers.

For Network Share access i have configured All IP Traffic and choosedIP traffic in Filter list. If i use\\PDCfrom client machine, it's blocking all network access even for Domain Computers.

My DC is WS2012, Workgroup Machine: Windows 7, Domain Joined Machine: Windows 7

I used Group policyIp Security Policies on Active Directory to implement the scenario.

Please help me to solve this.

Regards, Loganathan V