Re: Stop Browsing for computers

Unless you disable netbios over tcp/ip for the domain and then manage
permissions on AD objects you are not going to have much luck and that is
something to NOT consider without a lot of testing as things may break.

http://support.microsoft.com/kb/313314 --- disable netbios over tcp/ip
http://support.microsoft.com/kb/299977/ --- more info on the same with some
ramifications shown

You can hide computers running file and print sharing from appearing in the
browse list [ net config server /hidden:yes|no ] and also hide shares by
naming them with a $ after the name though that is not foolproof either. In
my opinion your best bet is to not worry about it but to make sure that
users have access to only those shared resources they need by managing share
and folder permissions and user rights [access this computer from the
network] with the best practice of least user privilege. Windows Firewall
and ipsec policies can also be used to prevent access to computers for
specific services and both can be managed via Group Policy

You can also use access based enumeration on Windows 2003 servers so that
users can not see folders within a share unless they have read permission
for the folder.

Steve

http://www.windowsnetworking.com/articles_tutorials/Implementing-Access-Based-Enumeration-Windows-Server-2003.html
--- ABE

"WMB" <noreply@xxxxxxxxxxx> wrote in message
news:%23187O9SIIHA.1316@xxxxxxxxxxxxxxxxxxxxxxx
Hello there

Is there a way to stop Mac and PC users from Browsing all my computers in
my windows 2003r2 domain.?


.

Relevant Pages

  • Re: Unable to delete orphaned 1.5 GB System Restore folder
    ... The only computers i fix are my own. ... If so you may want to leave this folder alone. ... it includes all subdirectories with inherited permissions. ... try deleting from the command line using system by using the AT ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Can a lone computer have Access db problems?
    ... Sorry about the loose use of the term 'edit'. ... nor was his permissions changed). ... certain computers to misbehave). ... When you say he is "authorized", that sounds as if the database is ...
    (comp.databases.ms-access)
  • Re: Custom rights
    ... Try giving user who is adding account View Only Exchange Administrator ... >> To add computers to the domain go to AD Users and Computers. ... you will have to manually configure permissions on that user object ... >>> Look into AD delegation, though you may need to do some custom ...
    (microsoft.public.win2000.security)
  • RE: Windows cannot access \Home-pcc - Error Code 0x80070005
    ... Even though I had sharing set up for Everyone (permissions) to read, ... VIOLA...I had computers talking to each other and ... It would be so nice if Microsoft could make the network setup a tad quicker ...
    (microsoft.public.windows.vista.networking_sharing)
  • Re: Computer-Assigned Programs Cannot Be Deployed
    ... So it is possible for computers or users in one Domain to fall under the ... Scope of Management of a GPO that was created in another Domain? ... all of the trusts and Share/NTFS Permissions are correct? ... this) but that it does not work between domains is incorrect. ...
    (microsoft.public.windows.server.active_directory)