Re: Removing Sharing & Security tabs from the Group Policy

It is fairly easy to restrict users that are not local administrators or
power users. Exactly what did you want to do? If it is to hide the security
tab for XP Pro computers use Group Policy under user
configuration/administrative templates/Windows components/Windows explorer -
hide security tab which you want to set to disabled which will also work for
local administrators though if they are skilled they can find work around
including logging on as a local user account.

Steve


"Varadarajam" <Varadarajam@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:9ADAB56A-4387-4650-BD38-EA71D45DF1BF@xxxxxxxxxxxxxxxx
Hi Steve

Thanks for your information.

If i remove the user from the Local admin group .Net and IIS is not
functioning properly.. Actually we wanna remove the users from the Local
Admin group but these development programs are affecting. Is there any way
to
restirct the users without having Local Admin rights.

Thanks and Regards

Varadarajam.

"Steven L Umbach" wrote:

You can easily enough remove the security tab through Group Policy but
not
the sharing tab. Also hiding access to such will generally not stop a
knowledgeable users from using other methods as trying to limit an
administrator will prove futile at least for some users. Keep in mind
that
local administrators can create local accounts to logon to in order to
bypass domain level Group Policy for user configuration. It would be best
to
evaluate whether users can function without being local administrators.
Another consideration is that you can manage the user right for access
this
computer from the network on your domain computers to allow only
specified
users/groups to access shares on your domain computers in case an
unauthorized share is created. I suggest that you do not change that user
right in however for domain controllers. For XP Pro computers the Windows
Firewall can also be configured to allow file and print sharing only from
specified IPs such as administrative workstations. Windows Firewall
settings
can be implemented via Group Policy for the domain profile for computers
on
the domain network.

Steve


"Varadarajam" <Varadarajam@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:F84A17BA-6303-4F1C-A764-1C14C6FA0C3B@xxxxxxxxxxxxxxxx
Hi,

This is Varadarajam. I need to maintain some security in my network. I
will
give the details follow.

I have 2003 Domain Controllers and 2000 Professionals and XP
Professionals
as a client systems.

What i wanna do is, Sharing and Security tabs should be disappeared in
the
Client systems even the users are in Local Admins group. Generally for
normal
users the Sharing tab will be disabled.

But if that user is in Local Admin group Sharing tab will be enabled
automatically, i want to disable that sharing option from the client
systems.
so, that the users can't share the folders or files from their systems.

I wanna do this through group policy from my 2003 Enterprise Server
Domain
controller.

I searched in the Internet i found only one solution. It didn't work
for
me.
I though that solution is for only 2000 DCs. This is the link which i
found
in the Internet.

http://www.commodore.ca/windows/remove_sharing_security_tab.htm

It didn't work out for me.

So, Kindly help me out of this problem.

Thanks and Regards
Varadarajam.P.V.






.

Relevant Pages

  • Re: Removing Sharing & Security tabs from the Group Policy
    ... Actually we wanna remove the users from the Local ... computer from the network on your domain computers to allow only specified ... users the Sharing tab will be disabled. ... But if that user is in Local Admin group Sharing tab will be enabled ...
    (microsoft.public.win2000.security)
  • Re: User type
    ... > you created to Local Administrators group on the computers. ... > The way I usually do it is by using a script like this ... >> them to the Domanin Admin group? ...
    (microsoft.public.windows.server.setup)
  • Re: Group Manipulation
    ... option for your new global group that contains the users that you want to be ... The computers that you want this to be enforced on ... Restricted Groups is configured. ... >> users being local administrators on all those computers keeping in mind ...
    (microsoft.public.windows.group_policy)
  • Re: Add another domain user group to local administrators of all computers in an OU with removing ot
    ...  You are using it incorrectly in forcing only group members defined ... Create the gpo in the ou where the Computers reside, ... some users who are local admins on machines and for some reason they feel ... compelled to remove the domain admins from their local administrators group. ...
    (microsoft.public.windows.server.active_directory)
  • Re: restricted groups for local admin rights
    ... If I want to add one domain user to one computers local administrators ... > describe you want to use the "member of" option for restricted groups. ... > strictly enforce membership of the local administrators group. ...
    (microsoft.public.windows.group_policy)
Loading