Solved

Turn off Network Discovery via GPO

Posted on 2014-01-07
2
15,676 Views
3 Endorsements
Last Modified: 2014-01-26
Does anyone know how to kill Network Discovery via GPO so users cant search through My Network and pull up shares that appear? I basically just want to provide access to specific shares per logon script, and prevent access to everything else available on the file servers. Also, can I just turn it off for specific servers for example, or does it have to be shut off for all of the workstations within the domain?
3
Comment
Question by:paulrausch
2 Comments
 
LVL 1

Accepted Solution

by:
JKZfixme earned 250 total points
ID: 39763300
On a domain controller, open up the Group Policy Management tool under Administrative Tools and navigate to:

Computer Policy\Policies\Administrative Templates\Network\Link-Layer Topology Discovery.

Turn off mapper & responder

shoudl do the trick
0
 
LVL 51

Assisted Solution

by:Netman66
Netman66 earned 250 total points
ID: 39763301
Create a new GPO linked only above your workstation OU and disable the following services:

Function Discovery Provider Host

&

Function Discovery Resource Publication

See if that helps.

This likely will not stop users from getting to find other sources via Save As within applications, but it may be enough.

If it doesn't do enough then you'll need to create an ADM(x) with some registry settings to deploy based on this article:

http://www.sevenforums.com/tutorials/39699-network-add-remove-navigation-pane.html

Creating an ADM:

http://blogs.technet.com/b/askds/archive/2007/08/14/deploying-custom-registry-changes-through-group-policy.aspx
0

Featured Post

Control application downtime with dependency maps

Visualize the interdependencies between application components better with Applications Manager's automated application discovery and dependency mapping feature. Resolve performance issues faster by quickly isolating problematic components.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I have been working as System Administrators since 2003. I recently started working as a FreeLancer and was amazed to find out that very few people are taking full advantage of their Windows Server Machines. Microsoft Windows Server comes with so…
Scenario:  You do full backups to a internal hard drive in either product (SBS or Server 2008).  All goes well for a very long time.  One day, backups begin to fail with a message that the disk is full.  Your disk contains many, many more backups th…
This tutorial will walk an individual through locating and launching the BEUtility application to properly change the service account username and\or password in situation where it may be necessary or where the password has been inadvertently change…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…

932 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now