Solved

How to stop users viewing the network on Windows 7

Posted on 2010-09-10
8
1,076 Views
Last Modified: 2012-08-13
Hi,

I have a domain where we have changed the clients from XP over to windows 7.  This is one of multiple domains in a school, so we don't want users to be able to view the network.

I have managed through a couple of registry hacks and an adm template to hide all references to the network in windows explorer, however the file open/save dialogs don't respect this setting and the entire network is browsable.

I managed to control this behaviour in windows xp by using the policies "no entire network in network locations" and "no computers near me in network locations", but these policies are supported on "Windows Server 2003, Windows XP, and Windows 2000 operating systems only".

Can anyone help with any suggestion to stop users being able to see and browse the network in this way?

I have scoured the group policies but I haven't yet been able to track down a setting that will let me control this behaviour.

Thanks in advance for any help.
network-shot.JPG
0
Comment
Question by:QEMS
  • 5
8 Comments
 
LVL 6

Expert Comment

by:sagiamar
ID: 33647763
try to disable the network discovery in windows 7 and remove the user premission to chanhe this options.
0
 
LVL 5

Author Comment

by:QEMS
ID: 33647869
Thanks for the suggestion, however I already have that option disabled and everything is still visible with my test user.  The users have no access to network settings or the control panel.

I have also disabled the following computer policies:
Computer Configuration -->> Administrative Templates -->> Network -->> Link-Layer Topology Discovery -->> Turn on Mapper I/O (LLTDIO) driver

Computer Configuration -->> Administrative Templates -->> Network -->> Link-Layer Topology Discovery -->> Turn on Responder (RSPNDR) driver
0
 

Expert Comment

by:MorbidVisions
ID: 33648181
Try disabling Netbios. It looks like one of the machines on your network is working as a Master Browser and is advertising the machines via Netbios. The downside is if there are any legacy applications on your network they may have connectivity issues. Here is a link to disable it via DHCP , if you don't want to handle them indiviually. http://support.microsoft.com/kb/313314
0
PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

 
LVL 5

Author Comment

by:QEMS
ID: 33649273
Thanks very much for your reply MorbidVisions - I'll have to wait until Monday morning to test it out now though.

If that solves the issue then I'll be very happy with that answer - but I'm still bugged by the question - is there a way to turn off that network option in the open/close dialog?
0
 
LVL 5

Author Comment

by:QEMS
ID: 33670967
MorbidVisions,

Apologies for the delay in responding, we have a trust between two of our domains and I am told that disabling NetBIOS on the dhcp server can cause us problems with that and an application that needs the trust to operate, so unfortunately I can't use your suggestion to disable it on the server.

I will try disabling it on the windows 7 computers and see what happens.
0
 
LVL 5

Accepted Solution

by:
QEMS earned 0 total points
ID: 34134442
Apologies, it has been a busy time here of late! I had asked this in a couple of other places and forgotten to give the feedback here.

None of the above recomendations worked, however I managed to find a bit of a messy work around by using the adm template which had hidden the items in windows explorer as a basis for another adm template which deals with the open/save dialog.

The problem appeared to be due to the fact that we are using 64 bit Windows 7, the following page has information:
http://www.sevenforums.com/tutorials/39699-network-add-remove-navigation-pane.html

There is an extra entry required in the Wow6432Node section of the registry for 64 bit Win7 that is not required in the 32 bit version.

Those additional changes (for the multiple items I wanted to hide from open/save) were put into an adm template which has provided an adequate work around for the time being.
0
 
LVL 5

Author Closing Comment

by:QEMS
ID: 34171345
The solution was found independantly of this site - solution provided for completeness rather than deleting the question.
0

Featured Post

Netscaler Common Configuration How To guides

If you use NetScaler you will want to see these guides. The NetScaler How To Guides show administrators how to get NetScaler up and configured by providing instructions for common scenarios and some not so common ones.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

New Windows 7 Installations take days for Windows-Updates to show up and install. This can easily be fixed. I have finally decided to write an article because this seems to get asked several times a day lately. This Article and the Links apply to…
When you try to extract and to view the contents of a Microsoft Update Standalone Package (MSU) for Windows Vista, you cannot extract the files from the MSU. Here we are going to explain how to extract those hotfix details without using any third pa…
This Micro Tutorial will teach you the basics of configuring your computer to improve its speed. It will also teach you how to disable programs that are running in the background simultaneously. This will be demonstrated using Windows 7 operating…
This Micro Tutorial will teach you how to the overview of Microsoft Security Essentials. This is a free anti-virus software that guards your PC against viruses, spyware, worms, and other malicious software. This will be demonstrated using Windows…

810 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question