[Webinar] Streamline your web hosting managementRegister Today

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 300
  • Last Modified:

Restrict sharing folders to administrators only

Hi All

As a security requirement in the environment i work in, i need to restrict all users except administrators to share folders located in them PCs, by default power users group can share folders and i need to prevent them that right.

Is there any way to apply this solution with Windows 2003 R2 & windows XP SP2?

Thanks in advance for your sincere cooperation.
0
melnahas
Asked:
melnahas
1 Solution
 
KCTSCommented:
Edit/Create a group policy
Computer Configuration->Windows Settings->Security Settings->Local Policies->User rights

Go to Create permanent shared objects - enable it and add Administrators, Domain Admins
0
 
kadadi_vIT AdminCommented:
or in that shared folder properties>in security >remove the everyone access and add only local and domain administrators.



Regards,

V.K.
0
 
melnahasAuthor Commented:
Concerning (Create permanent shared objects) right
I tried this GP element but unfortunately I didn't find the desired result, as I tested this with by giving domain admits group this right and add test user to local power users group and found this user able to share folders.

Concerning folder security permissions
I need those users to use these folders with full control, but I need them to never share those folders. So they can modify it or even delete it but never share it or any new folders, and use shared folders already made in file servers.
0
[Webinar] Kill tickets & tabs using PowerShell

Are you tired of cycling through the same browser tabs everyday to close the same repetitive tickets? In this webinar JumpCloud will show how you can leverage RESTful APIs to build your own PowerShell modules to kill tickets & tabs using the PowerShell command Invoke-RestMethod.

 
h11Commented:
why not remove them from the power users group? then they will not be able to share folders anymore.
0
 
melnahasAuthor Commented:
As they need to be in power users group to be able to run some applications and for the use of wireless network
0
 
h11Commented:
are you using ad or just a work group?
0
 
melnahasAuthor Commented:
Active Directory with windows 2003 R2 & XP clients
0
 
h11Commented:
instead of power users try using the NT authority interacive group and see if they can now open up programs. go into the users group on the pc and do this.  
0

Featured Post

Free Tool: Path Explorer

An intuitive utility to help find the CSS path to UI elements on a webpage. These paths are used frequently in a variety of front-end development and QA automation tasks.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now