Solved

Restrict sharing folders to administrators only

Posted on 2007-11-29
10
289 Views
Last Modified: 2012-05-05
Hi All

As a security requirement in the environment i work in, i need to restrict all users except administrators to share folders located in them PCs, by default power users group can share folders and i need to prevent them that right.

Is there any way to apply this solution with Windows 2003 R2 & windows XP SP2?

Thanks in advance for your sincere cooperation.
0
Comment
Question by:melnahas
10 Comments
 
LVL 70

Accepted Solution

by:
KCTS earned 200 total points
ID: 20372920
Edit/Create a group policy
Computer Configuration->Windows Settings->Security Settings->Local Policies->User rights

Go to Create permanent shared objects - enable it and add Administrators, Domain Admins
0
 
LVL 17

Expert Comment

by:kadadi_v
ID: 20373103
or in that shared folder properties>in security >remove the everyone access and add only local and domain administrators.



Regards,

V.K.
0
 

Author Comment

by:melnahas
ID: 20377114
Concerning (Create permanent shared objects) right
I tried this GP element but unfortunately I didn't find the desired result, as I tested this with by giving domain admits group this right and add test user to local power users group and found this user able to share folders.

Concerning folder security permissions
I need those users to use these folders with full control, but I need them to never share those folders. So they can modify it or even delete it but never share it or any new folders, and use shared folders already made in file servers.
0
 
LVL 2

Expert Comment

by:h11
ID: 20377265
why not remove them from the power users group? then they will not be able to share folders anymore.
0
Why You Should Analyze Threat Actor TTPs

After years of analyzing threat actor behavior, it’s become clear that at any given time there are specific tactics, techniques, and procedures (TTPs) that are particularly prevalent. By analyzing and understanding these TTPs, you can dramatically enhance your security program.

 

Author Comment

by:melnahas
ID: 20377340
As they need to be in power users group to be able to run some applications and for the use of wireless network
0
 
LVL 2

Expert Comment

by:h11
ID: 20377820
are you using ad or just a work group?
0
 

Author Comment

by:melnahas
ID: 20378716
Active Directory with windows 2003 R2 & XP clients
0
 
LVL 2

Expert Comment

by:h11
ID: 20380394
instead of power users try using the NT authority interacive group and see if they can now open up programs. go into the users group on the pc and do this.  
0

Featured Post

Find Ransomware Secrets With All-Source Analysis

Ransomware has become a major concern for organizations; its prevalence has grown due to past successes achieved by threat actors. While each ransomware variant is different, we’ve seen some common tactics and trends used among the authors of the malware.

Join & Write a Comment

We have adopted the strategy to use Computers in Student Labs as the bulletin boards. The same target can be achieved by using a Login Notice feature in Group policy but it’s not as attractive as graphical wallpapers with message which grabs the att…
Setting up a Microsoft WSUS update system is free relatively speaking if you have hard disk space and processor capacity.   However, WSUS can be a blessing and a curse. For example, there is nothing worse than approving updates and they just have…
This video discusses moving either the default database or any database to a new volume.
This demo shows you how to set up the containerized NetScaler CPX with NetScaler Management and Analytics System in a non-routable Mesos/Marathon environment for use with Micro-Services applications.

706 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

15 Experts available now in Live!

Get 1:1 Help Now