Prohibit use of Internet Connection Sharing on your DNS domain network & Prohibit Hosted Networks

Hi,

 Prohibit use of Internet Connection Sharing on your DNS domain network and Don't Allow hosted networks have been enabled through GPO and I want to make sure that the GPOs are working fine.

When the GPO is applied, on Windows 10 Mobile Hotspot is disabled and on either on Windows 8.1 or 10, when the user goes in CMD with administrator privileges to create a hosted network the below occurs:

You must run this command from command prompt with administrator privilege
Attempts to start any hosted network results in the below:

The group or resource is not in the correct state to perform the requested operation.
I want to make sure that this is expected behavior as a result of the GPO. Although it is prohibiting users from creating hosted networks, I am looking for proof that these errors are actually the result of the GPO being applied. Tried looking into Event viewer but cannot find relevant events.

Any heads up on if these are actually valid errors as a result of the GPO?

Thanks in advance
Robert MuscatAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

MaheshArchitectCommented:
once you disable ICS through GPO, even admins cannot enable ICS

For windows 10 only, blocking ICS will block hosted network as well.

For earlier version of windows, you need other GPO setting to block hosted network and hence what you are experiencing after enabling both policies would be correct.
1

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
McKnifeCommented:
Simply remove the GPO, do a gpupdate at the test computer and retry.
0
McKnifeCommented:
Why no split? I provided the easiest method to answer his question "Any heads up on if these are actually valid errors as a result of the GPO?"
0
MaheshArchitectCommented:
Actually from my point of view, author wanted to verify if GPO applied correctly and I have provided him assurance that GPO is applied correctly but I have not provide him cross verification option which you did so agreed, will split points

Mahesh.
0
MaheshArchitectCommented:
answers provided as appropriate
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows 10

From novice to tech pro — start learning today.