Solved

Turn off Network Discovery via GPO

Posted on 2014-01-07
2
17,711 Views
3 Endorsements
Last Modified: 2014-01-26
Does anyone know how to kill Network Discovery via GPO so users cant search through My Network and pull up shares that appear? I basically just want to provide access to specific shares per logon script, and prevent access to everything else available on the file servers. Also, can I just turn it off for specific servers for example, or does it have to be shut off for all of the workstations within the domain?
3
Comment
Question by:paulrausch
2 Comments
 
LVL 1

Accepted Solution

by:
JKZfixme earned 250 total points
ID: 39763300
On a domain controller, open up the Group Policy Management tool under Administrative Tools and navigate to:

Computer Policy\Policies\Administrative Templates\Network\Link-Layer Topology Discovery.

Turn off mapper & responder

shoudl do the trick
0
 
LVL 51

Assisted Solution

by:Netman66
Netman66 earned 250 total points
ID: 39763301
Create a new GPO linked only above your workstation OU and disable the following services:

Function Discovery Provider Host

&

Function Discovery Resource Publication

See if that helps.

This likely will not stop users from getting to find other sources via Save As within applications, but it may be enough.

If it doesn't do enough then you'll need to create an ADM(x) with some registry settings to deploy based on this article:

http://www.sevenforums.com/tutorials/39699-network-add-remove-navigation-pane.html

Creating an ADM:

http://blogs.technet.com/b/askds/archive/2007/08/14/deploying-custom-registry-changes-through-group-policy.aspx
0

Featured Post

NFR key for Veeam Backup for Microsoft Office 365

Veeam is happy to provide a free NFR license (for 1 year, up to 10 users). This license allows for the non‑production use of Veeam Backup for Microsoft Office 365 in your home lab without any feature limitations.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

We recently had an issue where out of nowhere, end users started indicating that their logins to our terminal server were just showing a "blank screen." After checking the usual suspects -- profiles, shell=explorer.exe in the registry, userinit.exe,…
The recent Microsoft changes on update philosophy for Windows pre-10 and their impact on existing WSUS implementations.
This tutorial will walk an individual through the steps necessary to install and configure the Windows Server Backup Utility. Directly connect an external storage device such as a USB drive, or CD\DVD burner: If the device is a USB drive, ensure i…
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…

749 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question