• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 301
  • Last Modified:

Restrict sharing folders to administrators only

Hi All

As a security requirement in the environment i work in, i need to restrict all users except administrators to share folders located in them PCs, by default power users group can share folders and i need to prevent them that right.

Is there any way to apply this solution with Windows 2003 R2 & windows XP SP2?

Thanks in advance for your sincere cooperation.
0
melnahas
Asked:
melnahas
1 Solution
 
Brian PiercePhotographerCommented:
Edit/Create a group policy
Computer Configuration->Windows Settings->Security Settings->Local Policies->User rights

Go to Create permanent shared objects - enable it and add Administrators, Domain Admins
0
 
kadadi_vIT AdminCommented:
or in that shared folder properties>in security >remove the everyone access and add only local and domain administrators.



Regards,

V.K.
0
 
melnahasAuthor Commented:
Concerning (Create permanent shared objects) right
I tried this GP element but unfortunately I didn't find the desired result, as I tested this with by giving domain admits group this right and add test user to local power users group and found this user able to share folders.

Concerning folder security permissions
I need those users to use these folders with full control, but I need them to never share those folders. So they can modify it or even delete it but never share it or any new folders, and use shared folders already made in file servers.
0
Free Tool: Port Scanner

Check which ports are open to the outside world. Helps make sure that your firewall rules are working as intended.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

 
h11Commented:
why not remove them from the power users group? then they will not be able to share folders anymore.
0
 
melnahasAuthor Commented:
As they need to be in power users group to be able to run some applications and for the use of wireless network
0
 
h11Commented:
are you using ad or just a work group?
0
 
melnahasAuthor Commented:
Active Directory with windows 2003 R2 & XP clients
0
 
h11Commented:
instead of power users try using the NT authority interacive group and see if they can now open up programs. go into the users group on the pc and do this.  
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Upgrade your Question Security!

Your question, your audience. Choose who sees your identity—and your question—with question security.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now