Group policy - disable folder sharing

Reply

shirmal Posted: 06-05-2009 10:36 PM

rated by 0 users

hi guys,

I want to prevet my clients sharing folders & files in their PCs. Can it be done using group policies? (My task is removing the "sharing" tab from folder properties window). If so can someone please tell me where that policy entry is in the group policy editor ?

cheers

shirmal

Reply

N I L H A N replied on 06-06-2009 8:42 AM

rated by 0 users

Hi Shirmal,

Cheapest way to do this is to kill Server service in any PC. But that's not elaborate and not exactly what you want. It's indeed possible through GPO...

Here's the how to... First one is XP/2003 specific and later one is for 2008.

http://www.kreslavsky.com/2007/01/disable-file-and-folder-sharing-via-gpo.html

http://technet.microsoft.com/en-us/library/cc754359(WS.10).aspx

Reply

shirmal replied on 06-06-2009 7:11 PM

rated by 0 users

hi Nilhan,

Thanks for your reply. But the group policy they say is not available in the group policy editor I get. (Windows XP)

** Expand Computer Configuration, Windows Settings, Security Settings, and then click Registry .

A sub folder called Registry is not available under the security settings.

any idea..

shirmal

Reply

N I L H A N replied on 06-07-2009 7:46 AM

rated by 0 users

Shirmal,

Well, you won't get that if you open the Local Computer Policy from a WinXP client machine. You got to open an actual GPO from the GP Object Editor, preferrably from the server itself.

See the screenshot...

Reply

shirmal replied on 06-07-2009 8:15 AM

rated by 0 users

Hi Nilhan,

Thanks, I have one more doubt. They ask to set this policy inside the default domain policy. (To the entire domain). Can't I apply this policy into a OU so that the policy will effect only to the specified set of users?  If it is possible to do, on what do should I apply this policy (for a computers OU or for a users OU ?)

cheers

shirmal

Reply

N I L H A N replied on 06-07-2009 9:27 AM

rated by 0 users

Yes, you can create a separate GPO just for this and apply to a specific OU. If you use Default Domain Policy, the entire domain will be affected.

If u use Computers OU (or any Computer accounts), the GPO will be affected to that computers regardless of which user is logging in. If it is Users OU (or any user accounts), the GPO will be afftected to those users regardless of what computer they are logging in. It just depends on your specific requirement.

Just keep in mind that you can take advantage of GPO filtering, overriding, inheritance blocking kind of stuff if your environment is more complex.