Re: Disabling sharing tab in client systems

"Steven L Umbach" <n9rou@xxxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:uiQxEb$xGHA.3844@xxxxxxxxxxxxxxxxxxxxxxx
For the OP power users can also share folders so you may want to look at
removing them from the power users or administrators group and making sure
that they are only regular users. Locally on one of the computer run the
command net user username using the actual username to see the groups that
the user belongs to on the computer. Also make sure the user is not a
member of a domain group that is a member of the local administrators or
power users group on his computer. A regular user can not create shares on
their computer.

Right now we still have small luxury to believe granting
Power Users membership to an account differs from giving
membership in Administrators, as elevation bits are not quite
on every keychain/device yet.
But realistically today on a non-DC one has only the one main
distinction, limited or admin account with which to work.
(Guest is a net access phenonmena else it is a full limited if
usable for local login, and PU --> adm trivial).

If people out there are using PU as if they are "for sure" keeping
adm contained there is some need for rethinking this use.



"Amarnath" <Amarnath@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:8099D6FA-567A-443E-84A9-668380B5E0A8@xxxxxxxxxxxxxxxx
I'm not giving users the admin accounts. They are the users of a group
abc,
and I want to disable sharing tab for this group members. Please help me
on
this issue.

"Roger Abell [MVP]" wrote:

It is, arguably, more simple to just not give then admin accounts.
If they are admins then there is nothing you can do to prevent them
from sharing out something if they really want to do so.

"Amarnath" <Amarnath@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:1AE2BF4C-450D-4E89-AE42-A9AF33C33AC1@xxxxxxxxxxxxxxxx
My network has 2003 domain controller, pl help me configure group
policy
so
that my users cannot share there local drives. In short disabling
sharing
tab
in client systems.







.

Relevant Pages

  • Re: Help with User Groups (XP Pro)
    ... the Administrators, Power Users, Users groups. ... likely see the account you changed in the groups you expect. ... Then Removed the Administrators. ... > Welcome sign on it shows that the User is a member of an unknown group. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Allowing a Domain User Admin Rights to a Couple of Domain Servers
    ... There are only few differences between a Power Users member ... and an Administrators group member, ...
    (microsoft.public.windows.server.security)
  • Re: DllRegisterServer and NT security
    ... A user must be a member of Administrators in order to have write/delete ... Power Users don't have write access to ... Registry Entries Made by an ActiveX Component ... Also read this section that explains the difference between Administrators ...
    (microsoft.public.vb.winapi)
  • Allow users to add network printers from workstation
    ... printers without making the user a member of local ... administrators or power users? ... Tom ...
    (microsoft.public.win2000.printing)
  • Re: Power User Setting Not Saved
    ... when I say "local user" I mean the login name that is typically used ... user that is a member of that OU then be a Power User? ... There are two ways to do Restricted Groups - members of this group or this ... membership of the Restricted Group [power users in your case] will be ...
    (microsoft.public.windowsxp.security_admin)