[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 298
  • Last Modified:

Restrict sharing folders to administrators only

Hi All

As a security requirement in the environment i work in, i need to restrict all users except administrators to share folders located in them PCs, by default power users group can share folders and i need to prevent them that right.

Is there any way to apply this solution with Windows 2003 R2 & windows XP SP2?

Thanks in advance for your sincere cooperation.
0
melnahas
Asked:
melnahas
1 Solution
 
KCTSCommented:
Edit/Create a group policy
Computer Configuration->Windows Settings->Security Settings->Local Policies->User rights

Go to Create permanent shared objects - enable it and add Administrators, Domain Admins
0
 
kadadi_vCommented:
or in that shared folder properties>in security >remove the everyone access and add only local and domain administrators.



Regards,

V.K.
0
 
melnahasAuthor Commented:
Concerning (Create permanent shared objects) right
I tried this GP element but unfortunately I didn't find the desired result, as I tested this with by giving domain admits group this right and add test user to local power users group and found this user able to share folders.

Concerning folder security permissions
I need those users to use these folders with full control, but I need them to never share those folders. So they can modify it or even delete it but never share it or any new folders, and use shared folders already made in file servers.
0
Prepare for your VMware VCP6-DCV exam.

Josh Coen and Jason Langer have prepared the latest edition of VCP study guide. Both authors have been working in the IT field for more than a decade, and both hold VMware certifications. This 163-page guide covers all 10 of the exam blueprint sections.

 
h11Commented:
why not remove them from the power users group? then they will not be able to share folders anymore.
0
 
melnahasAuthor Commented:
As they need to be in power users group to be able to run some applications and for the use of wireless network
0
 
h11Commented:
are you using ad or just a work group?
0
 
melnahasAuthor Commented:
Active Directory with windows 2003 R2 & XP clients
0
 
h11Commented:
instead of power users try using the NT authority interacive group and see if they can now open up programs. go into the users group on the pc and do this.  
0

Featured Post

Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Tackle projects and never again get stuck behind a technical roadblock.
Join Now