Re: Disabling sharing and group policies

• Previous message: Streeter, Joseph (WI): "RE: Domain vs. Local security policy"
• In reply to: Matthew Wagenknecht: "Disabling sharing and group policies"
• Next in thread: Matthew Wagenknecht: "RE: Disabling sharing and group policies"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

Date: Tue, 9 Sep 2003 20:09:44 +0200
To: focus-ms@securityfocus.com

On 2003-09-08 Matthew Wagenknecht wrote:
> Is there a way with Group Policies to disable sharing without pulling users
> from the Administrator group or killing adminstrative shares? I'm looking
> for a way to reduce "everyone" shares without flogging end users.

Not sure if I understand correctly. You have some administrative users
and don't want them to be able to create network shares? If that's what
you're question was: I don't think that's possible, since a local
administrators can (and should be able to) do almost anything on the
local machine. Even if there was a way of removing that privilege, a
local administrator could easily recover it. AFAIK you need to remove
the users from the administrators' group to achieve your goal.

Regards
Ansgar Wiechers

---------------------------------------------------------------------------
KaVaDo provides the first and only integrated Web application scanner and
firewall security suite that prevent Web applications attacks, the most
common form of online exploitation. Download a FREE whitepaper on Security Policy Automation for Web Applications.
http://www.securityfocus.com/sponsor/KaVaDo_focus-ms_030818
---------------------------------------------------------------------------

• Previous message: Streeter, Joseph (WI): "RE: Domain vs. Local security policy"
• In reply to: Matthew Wagenknecht: "Disabling sharing and group policies"
• Next in thread: Matthew Wagenknecht: "RE: Disabling sharing and group policies"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]