Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 22490
  • Last Modified:

Turn off Network Discovery via GPO

Does anyone know how to kill Network Discovery via GPO so users cant search through My Network and pull up shares that appear? I basically just want to provide access to specific shares per logon script, and prevent access to everything else available on the file servers. Also, can I just turn it off for specific servers for example, or does it have to be shut off for all of the workstations within the domain?
3
paulrausch
Asked:
paulrausch
2 Solutions
 
JKZfixmeCommented:
On a domain controller, open up the Group Policy Management tool under Administrative Tools and navigate to:

Computer Policy\Policies\Administrative Templates\Network\Link-Layer Topology Discovery.

Turn off mapper & responder

shoudl do the trick
0
 
Netman66Commented:
Create a new GPO linked only above your workstation OU and disable the following services:

Function Discovery Provider Host

&

Function Discovery Resource Publication

See if that helps.

This likely will not stop users from getting to find other sources via Save As within applications, but it may be enough.

If it doesn't do enough then you'll need to create an ADM(x) with some registry settings to deploy based on this article:

http://www.sevenforums.com/tutorials/39699-network-add-remove-navigation-pane.html

Creating an ADM:

http://blogs.technet.com/b/askds/archive/2007/08/14/deploying-custom-registry-changes-through-group-policy.aspx
0

Featured Post

Concerto's Cloud Advisory Services

Want to avoid the missteps to gaining all the benefits of the cloud? Learn more about the different assessment options from our Cloud Advisory team.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now