Re: Removing Sharing & Security tabs from the Group Policy

Hi Steve

Thanks for your information.

If i remove the user from the Local admin group .Net and IIS is not
functioning properly.. Actually we wanna remove the users from the Local
Admin group but these development programs are affecting. Is there any way to
restirct the users without having Local Admin rights.

Thanks and Regards

Varadarajam.

"Steven L Umbach" wrote:

You can easily enough remove the security tab through Group Policy but not
the sharing tab. Also hiding access to such will generally not stop a
knowledgeable users from using other methods as trying to limit an
administrator will prove futile at least for some users. Keep in mind that
local administrators can create local accounts to logon to in order to
bypass domain level Group Policy for user configuration. It would be best to
evaluate whether users can function without being local administrators.
Another consideration is that you can manage the user right for access this
computer from the network on your domain computers to allow only specified
users/groups to access shares on your domain computers in case an
unauthorized share is created. I suggest that you do not change that user
right in however for domain controllers. For XP Pro computers the Windows
Firewall can also be configured to allow file and print sharing only from
specified IPs such as administrative workstations. Windows Firewall settings
can be implemented via Group Policy for the domain profile for computers on
the domain network.

Steve


"Varadarajam" <Varadarajam@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:F84A17BA-6303-4F1C-A764-1C14C6FA0C3B@xxxxxxxxxxxxxxxx
Hi,

This is Varadarajam. I need to maintain some security in my network. I
will
give the details follow.

I have 2003 Domain Controllers and 2000 Professionals and XP Professionals
as a client systems.

What i wanna do is, Sharing and Security tabs should be disappeared in the
Client systems even the users are in Local Admins group. Generally for
normal
users the Sharing tab will be disabled.

But if that user is in Local Admin group Sharing tab will be enabled
automatically, i want to disable that sharing option from the client
systems.
so, that the users can't share the folders or files from their systems.

I wanna do this through group policy from my 2003 Enterprise Server Domain
controller.

I searched in the Internet i found only one solution. It didn't work for
me.
I though that solution is for only 2000 DCs. This is the link which i
found
in the Internet.

http://www.commodore.ca/windows/remove_sharing_security_tab.htm

It didn't work out for me.

So, Kindly help me out of this problem.

Thanks and Regards
Varadarajam.P.V.




.

Relevant Pages

  • Re: Removing Sharing & Security tabs from the Group Policy
    ... local administrators though if they are skilled they can find work around ... computer from the network on your domain computers to allow only ... users the Sharing tab will be disabled. ... But if that user is in Local Admin group Sharing tab will be enabled ...
    (microsoft.public.win2000.security)
  • Re: SBS2003 Client Setup Wizard Problem
    ... I WAS NOT happy with adding users to the local admin group even for first ... they will ask for User Account Control for permission to connect to the domain. ... this user will be added to local admin user group on the client computers. ...
    (microsoft.public.windows.server.sbs)
  • Re: Client Setup Wizard
    ... I'm running into a problem on about 4 of the computers. ... At Login (when client setup wizard script runs) on only a few of the ... If I change the the user to a local admin then I don't receive the ... Making users part of the local admin group is unacceptable. ...
    (microsoft.public.windows.server.sbs)
  • Re: Local Admin
    ... OU and after policies have refreshed all computers in the OU with restricted ... groups configured should have those users in their local administrators ... > control who should and shouldn't belong to a group which ... > button you don't get the option for the local admin group. ...
    (microsoft.public.win2000.security)
  • Re: Client Setup Wizard
    ... I'm running into a problem on about 4 of the computers. ... At Login on only a few of the ... If I change the the user to a local admin then I don't receive the ... Making users part of the local admin group is unacceptable. ...
    (microsoft.public.windows.server.sbs)