Solved

How to stop users viewing the network on Windows 7

Posted on 2010-09-10
8
1,071 Views
Last Modified: 2012-08-13
Hi,

I have a domain where we have changed the clients from XP over to windows 7.  This is one of multiple domains in a school, so we don't want users to be able to view the network.

I have managed through a couple of registry hacks and an adm template to hide all references to the network in windows explorer, however the file open/save dialogs don't respect this setting and the entire network is browsable.

I managed to control this behaviour in windows xp by using the policies "no entire network in network locations" and "no computers near me in network locations", but these policies are supported on "Windows Server 2003, Windows XP, and Windows 2000 operating systems only".

Can anyone help with any suggestion to stop users being able to see and browse the network in this way?

I have scoured the group policies but I haven't yet been able to track down a setting that will let me control this behaviour.

Thanks in advance for any help.
network-shot.JPG
0
Comment
Question by:QEMS
  • 5
8 Comments
 
LVL 6

Expert Comment

by:sagiamar
ID: 33647763
try to disable the network discovery in windows 7 and remove the user premission to chanhe this options.
0
 
LVL 5

Author Comment

by:QEMS
ID: 33647869
Thanks for the suggestion, however I already have that option disabled and everything is still visible with my test user.  The users have no access to network settings or the control panel.

I have also disabled the following computer policies:
Computer Configuration -->> Administrative Templates -->> Network -->> Link-Layer Topology Discovery -->> Turn on Mapper I/O (LLTDIO) driver

Computer Configuration -->> Administrative Templates -->> Network -->> Link-Layer Topology Discovery -->> Turn on Responder (RSPNDR) driver
0
 

Expert Comment

by:MorbidVisions
ID: 33648181
Try disabling Netbios. It looks like one of the machines on your network is working as a Master Browser and is advertising the machines via Netbios. The downside is if there are any legacy applications on your network they may have connectivity issues. Here is a link to disable it via DHCP , if you don't want to handle them indiviually. http://support.microsoft.com/kb/313314
0
[Webinar] Disaster Recovery and Cloud Management

Learn from Unigma and CloudBerry industry veterans which providers are best for certain use cases and how to lower cloud costs, how to grow your Managed Services practice in IaaS clouds, and how to utilize public cloud for Disaster Recovery

 
LVL 5

Author Comment

by:QEMS
ID: 33649273
Thanks very much for your reply MorbidVisions - I'll have to wait until Monday morning to test it out now though.

If that solves the issue then I'll be very happy with that answer - but I'm still bugged by the question - is there a way to turn off that network option in the open/close dialog?
0
 
LVL 5

Author Comment

by:QEMS
ID: 33670967
MorbidVisions,

Apologies for the delay in responding, we have a trust between two of our domains and I am told that disabling NetBIOS on the dhcp server can cause us problems with that and an application that needs the trust to operate, so unfortunately I can't use your suggestion to disable it on the server.

I will try disabling it on the windows 7 computers and see what happens.
0
 
LVL 5

Accepted Solution

by:
QEMS earned 0 total points
ID: 34134442
Apologies, it has been a busy time here of late! I had asked this in a couple of other places and forgotten to give the feedback here.

None of the above recomendations worked, however I managed to find a bit of a messy work around by using the adm template which had hidden the items in windows explorer as a basis for another adm template which deals with the open/save dialog.

The problem appeared to be due to the fact that we are using 64 bit Windows 7, the following page has information:
http://www.sevenforums.com/tutorials/39699-network-add-remove-navigation-pane.html

There is an extra entry required in the Wow6432Node section of the registry for 64 bit Win7 that is not required in the 32 bit version.

Those additional changes (for the multiple items I wanted to hide from open/save) were put into an adm template which has provided an adequate work around for the time being.
0
 
LVL 5

Author Closing Comment

by:QEMS
ID: 34171345
The solution was found independantly of this site - solution provided for completeness rather than deleting the question.
0

Featured Post

Do email signature updates give you a headache?

Do you feel like you are constantly making changes to email signatures? Are the images not formatting how you want them to? Want high-quality HTML signatures on all devices, including on mobiles and Macs? Then, let Exclaimer solve all your email signature problems today.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
cloning computer 13 65
smartboard connectivity and software 6 35
Connect VMs in VirtualBox 4 28
Pervasive SQL Error 4 23
A procedure for exporting installed hotfix details of remote computers using powershell
A safe way to clean winsxs folder from your windows server 2008 R2 editions
This tutorial will show how to configure a new Backup Exec 2012 server and move an existing database to that server with the use of the BEUtility. Install Backup Exec 2012 on the new server and apply all of the latest hotfixes and service packs. Theā€¦
The viewer will learn how to successfully download and install the SARDU utility on Windows 7, without downloading adware.

910 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

25 Experts available now in Live!

Get 1:1 Help Now