asked on

Restrict sharing folders to administrators only

Hi All

As a security requirement in the environment i work in, i need to restrict all users except administrators to share folders located in them PCs, by default power users group can share folders and i need to prevent them that right.

Is there any way to apply this solution with Windows 2003 R2 & windows XP SP2?

Thanks in advance for your sincere cooperation.

ASKER CERTIFIED SOLUTION

Brian Pierce

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

kadadi_v

or in that shared folder properties>in security >remove the everyone access and add only local and domain administrators.

Regards,

V.K.

melnahas

ASKER

Concerning (Create permanent shared objects) right
I tried this GP element but unfortunately I didn't find the desired result, as I tested this with by giving domain admits group this right and add test user to local power users group and found this user able to share folders.

Concerning folder security permissions
I need those users to use these folders with full control, but I need them to never share those folders. So they can modify it or even delete it but never share it or any new folders, and use shared folders already made in file servers.

h11

why not remove them from the power users group? then they will not be able to share folders anymore.

melnahas

ASKER

As they need to be in power users group to be able to run some applications and for the use of wireless network

h11

are you using ad or just a work group?

melnahas

ASKER

Active Directory with windows 2003 R2 & XP clients

h11

instead of power users try using the NT authority interacive group and see if they can now open up programs. go into the users group on the pc and do this.