Solved

GPO to turn off simple file sharring.

Posted on 2008-06-10
8
829 Views
Last Modified: 2012-05-05
Hi
Is there a GPO to turn off Simple file sharring on XP machines.
I am using CA remote install software to push out AV and spyware there tech guys have addvised me simple file sharring must be turned off.
0
Comment
Question by:donhodge
  • 4
  • 4
8 Comments
 
LVL 6

Expert Comment

by:DaMaestro
ID: 21756968
Simple file sharing is only used when the machine is not on the domain.

http://www.microsoft.com/technet/security/advisory/906574.mspx

Turn off the guest account if the machines are not on a domain.
0
 

Author Comment

by:donhodge
ID: 21757034
Thats exactly what i said to the tech guy at CA however i found a couple of laptops on my domain had simple file sharring enabled, And they are definately on the Domain.
Whats ur thoughts. Thanks
0
 
LVL 6

Expert Comment

by:DaMaestro
ID: 21757157
Are those machines using a non NTFS filesystem?  I know some recovery partitions are FAT32, hopefully the machine isn't seeing that.

There was someone at my previous assignment that always took his computer off the domain, the computer account can be present, but stale.

You could also perform a baseline security analysis to see if something else is going on.



0
Backup Solution for AWS

Read about how CloudBerry Backup fully integrates your backups with Amazon S3 and Amazon Glacier to provide military-grade encryption and dramatically cut storage costs on any platform.

 

Author Comment

by:donhodge
ID: 21757193
They are all NTFS System partitions and yes they have a FAT 32 Recovery partition.
We are only a small network and the user will not take there computer off the domain, nor do they have permission.
It could be a prob with the FAT32 Part as it only seems to be on laptops that i have the prob.
0
 
LVL 6

Expert Comment

by:DaMaestro
ID: 21757243
So, if they are showing as a mapped drive, you can use policy to hide the FAT32 drive, provided they all use the same drive letter.

User      Windows Explorer      Prevent access to drives from My Computer
0
 

Author Comment

by:donhodge
ID: 21790527
sorry to take a long time to respond, flat out with other issues.
So there is no acctual GPO to turn simple file sharing off.

Thanks
0
 
LVL 6

Accepted Solution

by:
DaMaestro earned 500 total points
ID: 21796111
No, because in a domain enviroment it's not suppose to be on. It could be a false positive, maybe the software thinks it's simple file sharing because of the fat32 situation, maybe it's trying to set permissions.
0
 

Author Closing Comment

by:donhodge
ID: 31466023
I will have to change some drive letters. I will give your sollution a try. If this does not work i will just do it manualy.

Thanks for all your time.....
0

Featured Post

Edgartown IT Case Study

Learn about Edgartown's quest to ensure the safety and security of the entire town's employee and citizen data. Read the case study!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

by Batuhan Cetin In this article I will be guiding through the process of removing a failed DC metadata from Active Directory (hereafter, AD) using the ntdsutil tool in a Windows Server 2003 environment. These steps are not necessary in a Win…
A quick step-by-step overview of installing and configuring Carbonite Server Backup.
This video shows how to use Hyena, from SystemTools Software, to bulk import 100 user accounts from an external text file. View in 1080p for best video quality.
Finds all prime numbers in a range requested and places them in a public primes() array. I've demostrated a template size of 30 (2 * 3 * 5) but larger templates can be built such 210  (2 * 3 * 5 * 7) or 2310  (2 * 3 * 5 * 7 * 11). The larger templa…

685 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question