maingateinc
asked on
Enable Use Simple File Sharing with a GPO
Hello Experts:
I need to enable Simple File Sharing for every computer on my domain (about 200). I'd like to use a GPO to do this. I have done some brief reading and evidently there are claims that Simple File Sharing is not an option when a computer is joined to a domain. However on my own computer which is on the domain I am able to Enable and use Simple File Sharing. I need to make this work for every computer for rolling out a software package that evidently fails unless Simple File Sharing is enabled.
Windows 2003 domain
Windows XP SP2/3 workstations
Thanks much
I need to enable Simple File Sharing for every computer on my domain (about 200). I'd like to use a GPO to do this. I have done some brief reading and evidently there are claims that Simple File Sharing is not an option when a computer is joined to a domain. However on my own computer which is on the domain I am able to Enable and use Simple File Sharing. I need to make this work for every computer for rolling out a software package that evidently fails unless Simple File Sharing is enabled.
Windows 2003 domain
Windows XP SP2/3 workstations
Thanks much
When you said your machine is on the domain and able to Enable and user SFS, is your machine able to receive the software package without problem? If so, here's the question, how do you deploy the software package? If the deployment method required specific admin access to your machine and if the deployment rely on your logon, it may be just because you have admin access and may not have to do with SFS is enabled. To me, I thougth the SFS is enabled on both XP home or XP Pro, but it has no effect on XP Pro. Or have you tried on another machine to further verify if the software package actually work with a non admin account on a differnt machine that you thing the SFS is enabled?
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
If the clients are part of a Windows* domain, you can apply a Group Policy to the clients that need to have this setting disabled.
To configure the Group Policy to disable this setting, browse to the following in the Group Policy Editor on a domain controller:
Local Computer Policy\Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Options\Network access: Sharing and security model for local accounts
Set this policy to Classic - local users authenticate as themselves.
When this policy applies to the client, it sets the following registry key to 0:
HKEY_LOCAL_MACHINE\SYSTEM\ CurrentCon trolSet\Co ntrol\Lsa\ forceguest
To configure the Group Policy to disable this setting, browse to the following in the Group Policy Editor on a domain controller:
Local Computer Policy\Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Options\Network access: Sharing and security model for local accounts
Set this policy to Classic - local users authenticate as themselves.
When this policy applies to the client, it sets the following registry key to 0:
HKEY_LOCAL_MACHINE\SYSTEM\