Solved

Restrict sharing folders to administrators only

Posted on 2007-11-29
10
294 Views
Last Modified: 2012-05-05
Hi All

As a security requirement in the environment i work in, i need to restrict all users except administrators to share folders located in them PCs, by default power users group can share folders and i need to prevent them that right.

Is there any way to apply this solution with Windows 2003 R2 & windows XP SP2?

Thanks in advance for your sincere cooperation.
0
Comment
Question by:melnahas
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
10 Comments
 
LVL 70

Accepted Solution

by:
KCTS earned 200 total points
ID: 20372920
Edit/Create a group policy
Computer Configuration->Windows Settings->Security Settings->Local Policies->User rights

Go to Create permanent shared objects - enable it and add Administrators, Domain Admins
0
 
LVL 17

Expert Comment

by:kadadi_v
ID: 20373103
or in that shared folder properties>in security >remove the everyone access and add only local and domain administrators.



Regards,

V.K.
0
 

Author Comment

by:melnahas
ID: 20377114
Concerning (Create permanent shared objects) right
I tried this GP element but unfortunately I didn't find the desired result, as I tested this with by giving domain admits group this right and add test user to local power users group and found this user able to share folders.

Concerning folder security permissions
I need those users to use these folders with full control, but I need them to never share those folders. So they can modify it or even delete it but never share it or any new folders, and use shared folders already made in file servers.
0
What Is Transaction Monitoring and who needs it?

Synthetic Transaction Monitoring that you need for the day to day, which ensures your business website keeps running optimally, and that there is no downtime to impact your customer experience.

 
LVL 2

Expert Comment

by:h11
ID: 20377265
why not remove them from the power users group? then they will not be able to share folders anymore.
0
 

Author Comment

by:melnahas
ID: 20377340
As they need to be in power users group to be able to run some applications and for the use of wireless network
0
 
LVL 2

Expert Comment

by:h11
ID: 20377820
are you using ad or just a work group?
0
 

Author Comment

by:melnahas
ID: 20378716
Active Directory with windows 2003 R2 & XP clients
0
 
LVL 2

Expert Comment

by:h11
ID: 20380394
instead of power users try using the NT authority interacive group and see if they can now open up programs. go into the users group on the pc and do this.  
0

Featured Post

Comparison of Amazon Drive, Google Drive, OneDrive

What is Best for Backup: Amazon Drive, Google Drive or MS OneDrive? In this free whitepaper we look at their performance, pricing, and platform availability to help you decide which cloud drive is right for your situation. Download and read the results of our testing for free!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

If your system is showing symptoms of browser hijacks or 'google search redirects' check out my other article (http://rdsrc.us/u3GP7A) first and run the tool TDSSKiller (http://rdsrc.us/GDBBs4) to get rid of the infection. Once done, and if the …
Step by step guide to Clean and Sort your windows registry! Introduction: Always remember: A Clean registry = Better performance = Save your invaluable time In this article we're going to clear our registry manually! Yes, manually! The e…
Two types of users will appreciate AOMEI Backupper Pro: 1 - Those with PCIe drives (and haven't found cloning software that works on them). 2 - Those who want a fast clone of their boot drive (no re-boots needed) and it can clone your drive wh…
There's a multitude of different network monitoring solutions out there, and you're probably wondering what makes NetCrunch so special. It's completely agentless, but does let you create an agent, if you desire. It offers powerful scalability …

688 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question