Go Premium for a chance to win a PS4. Enter to Win

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1093
  • Last Modified:

How to stop users viewing the network on Windows 7

Hi,

I have a domain where we have changed the clients from XP over to windows 7.  This is one of multiple domains in a school, so we don't want users to be able to view the network.

I have managed through a couple of registry hacks and an adm template to hide all references to the network in windows explorer, however the file open/save dialogs don't respect this setting and the entire network is browsable.

I managed to control this behaviour in windows xp by using the policies "no entire network in network locations" and "no computers near me in network locations", but these policies are supported on "Windows Server 2003, Windows XP, and Windows 2000 operating systems only".

Can anyone help with any suggestion to stop users being able to see and browse the network in this way?

I have scoured the group policies but I haven't yet been able to track down a setting that will let me control this behaviour.

Thanks in advance for any help.
network-shot.JPG
0
QEMS
Asked:
QEMS
  • 5
1 Solution
 
sagiamarCommented:
try to disable the network discovery in windows 7 and remove the user premission to chanhe this options.
0
 
QEMSAuthor Commented:
Thanks for the suggestion, however I already have that option disabled and everything is still visible with my test user.  The users have no access to network settings or the control panel.

I have also disabled the following computer policies:
Computer Configuration -->> Administrative Templates -->> Network -->> Link-Layer Topology Discovery -->> Turn on Mapper I/O (LLTDIO) driver

Computer Configuration -->> Administrative Templates -->> Network -->> Link-Layer Topology Discovery -->> Turn on Responder (RSPNDR) driver
0
 
MorbidVisionsCommented:
Try disabling Netbios. It looks like one of the machines on your network is working as a Master Browser and is advertising the machines via Netbios. The downside is if there are any legacy applications on your network they may have connectivity issues. Here is a link to disable it via DHCP , if you don't want to handle them indiviually. http://support.microsoft.com/kb/313314
0
Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 
QEMSAuthor Commented:
Thanks very much for your reply MorbidVisions - I'll have to wait until Monday morning to test it out now though.

If that solves the issue then I'll be very happy with that answer - but I'm still bugged by the question - is there a way to turn off that network option in the open/close dialog?
0
 
QEMSAuthor Commented:
MorbidVisions,

Apologies for the delay in responding, we have a trust between two of our domains and I am told that disabling NetBIOS on the dhcp server can cause us problems with that and an application that needs the trust to operate, so unfortunately I can't use your suggestion to disable it on the server.

I will try disabling it on the windows 7 computers and see what happens.
0
 
QEMSAuthor Commented:
Apologies, it has been a busy time here of late! I had asked this in a couple of other places and forgotten to give the feedback here.

None of the above recomendations worked, however I managed to find a bit of a messy work around by using the adm template which had hidden the items in windows explorer as a basis for another adm template which deals with the open/save dialog.

The problem appeared to be due to the fact that we are using 64 bit Windows 7, the following page has information:
http://www.sevenforums.com/tutorials/39699-network-add-remove-navigation-pane.html

There is an extra entry required in the Wow6432Node section of the registry for 64 bit Win7 that is not required in the 32 bit version.

Those additional changes (for the multiple items I wanted to hide from open/save) were put into an adm template which has provided an adequate work around for the time being.
0
 
QEMSAuthor Commented:
The solution was found independantly of this site - solution provided for completeness rather than deleting the question.
0

Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

  • 5
Tackle projects and never again get stuck behind a technical roadblock.
Join Now