restricting folder(s) at network level

I installed Hamachi Free VPN. I have shared (full control) my entire external drive for convenience for everyone on my LAN. However, there are some folders that need to be excluded from this share over the VPN due to sensitive information in those folders (other users on my LAN backup data to those folders).

Is there a way to restrict ALL users over the VPN from accessing those folders (without adding a rule for every user)?

Hamachi free support has nothing on this...

really? No one here knows??

You'll have to redo the ACL. The Everyone group will cover ALL users. Does your VPN require username and password? There are several ways to lock a folder down, it will depend on your VPN authentication.

It inherits the LAN network settings. Ie: If I had set in the network and sharing center to require pw for share access, then Hamachi network would also require pw for share accesss, etc.

When redoing the ACL, if I deny the group Everyone, then it overrides the Admin & Users groups. the effect would deny all admins from touching the folder. How would I avoid this?

Administrator & Administrators group(s) needs to stay. Everyone group needs to go. At that point, you'll need to determine WHO you want to give access to. If users authenticate to the local machine, you'll create users for said machine. Those users would then be added to the ACL with appropriate permission sets.