Re: Simple File Sharing question

You do not need to add it with an adm as it is already built into
the sceregvl.inf as a Security Option policy with description
Network access: Sharing and security model for local accounts

What I was saying was that I do not recall seeing the policy
employed to effect the behavior seen upon a domain join.

--
Roger
"M Irusalimsky" <irusalimsky@xxxxxxxxxxx> wrote in message
news:Oj3kYGoBGHA.2356@xxxxxxxxxxxxxxxxxxxxxxx
> Actually there is a way to add it to GPO, by making your own custom *.adm
> file, im no expert but it should look like simmilar to this:
>
> CLASS MACHINE
>
> CATEGORY !!WindowsComponents
> POLICY !!SimpleFileSharing
> KEYNAME "SYSTEM\CurrentControlSet\Control\Lsa"
> EXPLAIN !!SimpleFileSharing_Explain
> VALUENAME "ForceGuest"
> VALUEON NUMERIC 1
> VALUEOFF NUMERIC 0
> END POLICY
> END CATEGORY
> END CATEGORY
>
> [strings]
> category = "Custom Policy Settings"
> SimpleFileSharing = "Simple File Sharing"
> WindowsExplorer = "Windows Explorer"
> SimpleFileSharing_Explain = "Enable to enable Use simple file sharing.
> Disable to disable Use simple file sharing."
>
>
> --
> M Irusalimsky
> MCP, MCSA, MCSE
> "Books are your friends"
>
>
> "Roger Abell [MVP]" <mvpNoSpam@xxxxxxx> wrote in message
> news:euljVgfBGHA.2704@xxxxxxxxxxxxxxxxxxxxxxx
>> Yep, and as I do not recall seeing the policy for forceguest being
>> set in local or AD based policy so as to be effective on join, I do
>> think it is in the wiring so it cannot be reversed by policy after join.
>> But, then again, as I have no use for simple sharing mode, I have
>> not gone there and investigated.
>>
>> "Steven L Umbach" <n9rou@xxxxxxxxxxxxxxxxxx> wrote in message
>> news:uCbHONQBGHA.2036@xxxxxxxxxxxxxxxxxxxxxxx
>>>I don't know for sure that it would work as I should have said it "could"
>>>work. Now that I think about it more, for a domain computer the best
>>>option is to enforce the security option network access:sharing and
>>>security model to be classic. --- Steve
>>>
>>>
>>> "Roger Abell [MVP]" <mvpNoSpam@xxxxxxx> wrote in message
>>> news:%236bp8xFBGHA.2664@xxxxxxxxxxxxxxxxxxxxxxx
>>>> Whoa, I have never thought of trying that to see if it works.
>>>> (not that I would like a system that way, but I had thought the
>>>> switching on domain join was hard-wired).
>>>>
>>>> --
>>>> Roger Abell
>>>> Microsoft MVP (Windows Server : Security)
>>>>
>>>> "Steven L Umbach" <n9rou@xxxxxxxxxxxxxxxxxx> wrote in message
>>>> news:OWU%23he0AGHA.3840@xxxxxxxxxxxxxxxxxxxxxxx
>>>>> If the user is not a local administrator then that logon script would
>>>>> fail though a Group Policy startup script would work but you are right
>>>>> in that for domain computers this should already be done. Maybe the
>>>>> users are local administrators and decided to change it back to simple
>>>>> file aring. --- Steve
>>>>>
>>>>>
>>>>> "M Irusalimsky, MCSA" <irusalimsky@xxxxxxxxxxx> wrote in message
>>>>> news:e2Q6ZaWAGHA.264@xxxxxxxxxxxxxxxxxxxxxxx
>>>>>> if im not mistaken, it suppose to get disabled when you join xp
>>>>>> clients to domain.... looks like its not, or it didnt......
>>>>>> anyways here is the registry key, put it in logon script......
>>>>>> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa
>>>>>> "forceguest"=dword:0
>>>>>>
>>>>>> enjoy
>>>>>>
>>>>>>
>>>>>>
>>>>>> "PeterW" <pW@xxxxxxxxxxxxx> wrote in message
>>>>>> news:Otp2odSAGHA.312@xxxxxxxxxxxxxxxxxxxxxxx
>>>>>>> Not sure if this is the right group but here goes.
>>>>>>>
>>>>>>> I have an application I wish to roll out over the network.
>>>>>>> It requires "simple file sharing" be disabled in "my computer =>
>>>>>>> tools => folder options =>view" of the xp clients
>>>>>>>
>>>>>>> Is there a group policy setting or a reg key that can be used to
>>>>>>> save walking around to each PC?
>>>>>>>
>>>>>>> Many thanks in advance
>>>>>>>
>>>>>>> Peter W
>>>>>>>
>>>>>>
>>>>>>
>>>>>
>>>>>
>>>>
>>>>
>>>
>>>
>>
>>
>
>


.

Relevant Pages

  • Re: Registry settings management for 16 computers through Group Po
    ... AutoLogonCfg="Configure Automatic user logon" ... This ADM fiel is working fine. ... policy templete. ... the key needs to be located under Approved Registry Key ...
    (microsoft.public.windows.group_policy)
  • Re: Remote Event Log
    ... I need to setup the policy and permission on the Controller so ... It´s because of the change in security to eventlog announced in W2K3 SP1. ... Doing it by ADM Template ... My guess: The actual permissions on your eventlog are: ...
    (microsoft.public.windows.group_policy)
  • RE: ADM Templates not updating
    ... Reset the system ADM: ... Please open Group Policy Editor on SBS ... Extend to Computer Configuration -> Administrative Templates ...
    (microsoft.public.windows.server.sbs)
  • Re: Group Policy - ADM Files - I am totally confused!
    ... (this is where the GPOs are actually stored). ... And this is where GPMC will look first when you want to add a new ADM to it. ... and they will replace / update the ones on the server in the correct locations without causing any problems with my GP settings? ... I've never seen changes to the ADMs break any policy, though if there's a policy item that exists in the policy for which the ADM doesn't have information, you will see references in the GPMC and other management tools to "extra registry settings", and you may not be able to update those elements in the GPO. ...
    (microsoft.public.windows.server.sbs)
  • Re: Important information about XP SP2 .ADM Files
    ... Will the new SP2 ADMs be available as a separate download on the ADM ... > bring your attention to an important issue related to Group Policy. ...
    (microsoft.public.win2000.group_policy)