GPO to turn off simple file sharring.

Simple file sharing is only used when the machine is not on the domain.

http://www.microsoft.com/technet/security/advisory/906574.mspx

Turn off the guest account if the machines are not on a domain.

Thats exactly what i said to the tech guy at CA however i found a couple of laptops on my domain had simple file sharring enabled, And they are definately on the Domain.
Whats ur thoughts. Thanks

Are those machines using a non NTFS filesystem?  I know some recovery partitions are FAT32, hopefully the machine isn't seeing that.

There was someone at my previous assignment that always took his computer off the domain, the computer account can be present, but stale.

You could also perform a baseline security analysis to see if something else is going on.

They are all NTFS System partitions and yes they have a FAT 32 Recovery partition.
We are only a small network and the user will not take there computer off the domain, nor do they have permission.
It could be a prob with the FAT32 Part as it only seems to be on laptops that i have the prob.

So, if they are showing as a mapped drive, you can use policy to hide the FAT32 drive, provided they all use the same drive letter.

User      Windows Explorer      Prevent access to drives from My Computer

sorry to take a long time to respond, flat out with other issues.
So there is no acctual GPO to turn simple file sharing off.

Thanks

I will have to change some drive letters. I will give your sollution a try. If this does not work i will just do it manualy.

Thanks for all your time.....