Re: Removing Sharing & Security tabs from the Group Policy

You can easily enough remove the security tab through Group Policy but not
the sharing tab. Also hiding access to such will generally not stop a
knowledgeable users from using other methods as trying to limit an
administrator will prove futile at least for some users. Keep in mind that
local administrators can create local accounts to logon to in order to
bypass domain level Group Policy for user configuration. It would be best to
evaluate whether users can function without being local administrators.
Another consideration is that you can manage the user right for access this
computer from the network on your domain computers to allow only specified
users/groups to access shares on your domain computers in case an
unauthorized share is created. I suggest that you do not change that user
right in however for domain controllers. For XP Pro computers the Windows
Firewall can also be configured to allow file and print sharing only from
specified IPs such as administrative workstations. Windows Firewall settings
can be implemented via Group Policy for the domain profile for computers on
the domain network.

Steve


"Varadarajam" <Varadarajam@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:F84A17BA-6303-4F1C-A764-1C14C6FA0C3B@xxxxxxxxxxxxxxxx
Hi,

This is Varadarajam. I need to maintain some security in my network. I
will
give the details follow.

I have 2003 Domain Controllers and 2000 Professionals and XP Professionals
as a client systems.

What i wanna do is, Sharing and Security tabs should be disappeared in the
Client systems even the users are in Local Admins group. Generally for
normal
users the Sharing tab will be disabled.

But if that user is in Local Admin group Sharing tab will be enabled
automatically, i want to disable that sharing option from the client
systems.
so, that the users can't share the folders or files from their systems.

I wanna do this through group policy from my 2003 Enterprise Server Domain
controller.

I searched in the Internet i found only one solution. It didn't work for
me.
I though that solution is for only 2000 DCs. This is the link which i
found
in the Internet.

http://www.commodore.ca/windows/remove_sharing_security_tab.htm

It didn't work out for me.

So, Kindly help me out of this problem.

Thanks and Regards
Varadarajam.P.V.



.

Relevant Pages

  • RE: Deploy SP2 with Active Directory and GPOs?
    ... In a Windows 2000 or Windows 2003 based domain, ... Group Policy is stored as part of Active ... publish programs to users or computers in the Windows 2000 or Windows 2003 ... After the installation files have been prepared, ...
    (microsoft.public.windowsxp.general)
  • Re: Installing Service Packs
    ... NTFS permissions and - in this particular case - Domain Computers Read on ... account objects that need to have SP4 installed into this OU. ... an OU to which a GPO that installs software is linked, ... So, right click the OU, select Properties and go to the Group Policy tab. ...
    (microsoft.public.win2000.group_policy)
  • Using GP to deploy service packs
    ... Assigning Service Pack 4 to Computers ... Create a shared network distribution folder. ... Create a group policy for SP4 deployments. ...
    (microsoft.public.windows.server.general)
  • Re: Group policy issue
    ... unfortunately they are people, not computers. ... you will see on unapplied GPO list, but is applied on computers and you ... MCSA Windows 2003 server ... Applied Group Policy Objects ...
    (microsoft.public.windows.server.networking)
  • RE: Legacy application installations
    ... the arbortext.msi to thousands of computers instead of just using one copy ... configure Software installation to assign or to publish software to all the ... Create a Group Policy object for the customer application software ... Please refer to: ...
    (microsoft.public.windows.vista.security)