We have a workgroup where security has not been an issue until now. A new PC has been added to the workgroup, it has two shared folders which the other PC's need to access. This access has been setup and is all OK but I do not want the users on the new PC to be able to map to/view/delete folders on the existing PCs.
I cannot disable the guest account on the existing PC's as there is ESKO prepress software involved which is fairly specific in its requirements and has many shared folders across all existing PC's.
I thought if I could restrict access to the network for the new PC this may overcome the problem.
1. Set NoNetDrives on HKEY_CURENT_SUER\SOFTWARE\Microsoft\Windows\CurrentVersion\Polocies\Explorer. to 1.
2. Cleared out the Map Network Drive MRU list in HKEY_CURENT_SUER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer.
Now the user cannot map to a network drive, cannot view the network via Network Neighbourhood. But if they know the computer/fodler name they can map to it anyway.
Is there some way of preventing users from doing this?