GPO to prevent users sharing folders?

[RecLambyUK]

Hi guys,

I have a scenario of a Windows 2000 server with all clients running Windows 2000 as well. Basically we have found a few guys on our site who are creating shared folders of MP3 files for employees in our other sites to copy. When this is done down our leased line it slows the traffic right down as some of these folders are up to 8GB!!

Basically I was wondering if there was a setting or add-on for GPO which I can use to prevent the user from creating shares on any of their folders?

Thanks guys!
Lamby

 

[RecLambyUK]

Hey guys, could really do with some help on this one! Have the boss coming over next week and he wants to see if I have done anything on this

Cheers, Lamby

 

[aftertaf]

do it with NTFS Permissions......

take away their rights!


Aftertaf
if its not broken, fix it anyway - with luck you might break it and have an excuse

 

[RecLambyUK]

Hi aftertaf, could you explain that in a bit more detail please? How can I do that in the GPO?

 

[aftertaf]

the folders they are sharing are on how many servers?

because its not a GPO thing actually...

by changing permission rights, you can stop the users from being able to create folders.
however, the ability to share existing folders... i'm looking into it.

The best solution for your problem depends on what the files shares on the server(s) are used for, and the rights the users need to have.

If they need write access, it is more complicated to restrict their ability to copy the mp3s and share folders they create....

in that case, you can use outright prevention:
-a message at login saying the exchange of mp3 on corporate servers is not acceptable
-alogin or logout script for the users in question that runs an batch file, deleting all files ending in *.mp3 on the shares...
its a bit low, but then again, your company gets caught with all that on the servers, it could have more serious consequences!!

get back 2 me if you want more help, or to give us more info on your shares,
that way we might find a tailor made answer to your pb.


Aftertaf
if its not broken, fix it anyway - with luck you might break it and have an excuse

 

[RecLambyUK]

Aftertaf, thanks for your detailed reply, I am really struggling to find an answer here!

Basically, the shares are not on a server they are on the users local machines. When a user right clicks a folder on their PC (Windows 2000) and clicks on the sharing tab, there is full range for them to share all the data in that folder. This is what we want to prevent.

For example, fred creates a folder on his PC called "music". He then turns sharing on for this folder, now anybody browsing to fred's PC (We have a lot of nosy employees!!) will see a folder sitting there named "music" and it will be like Christmas come early with all the free music for them.

Our IT Director in Dublin wants this ability removed from the user and has passed this onto me. I have searched through the internet but cant find anything!!

Cheers, Lamby

 

[aftertaf]

then warn the users with a logon message, and activate a logoff script to delete all mp3s on the local machine
sly as hell


Aftertaf
if its not broken, fix it anyway - with luck you might break it and have an excuse

 

[aftertaf]

http://www.blackviper.com/WIN2K/win2kservice411.htm#Server

you can disable the SERVER service, which disables file and print sharing!!!


Aftertaf
if its not broken, fix it anyway - with luck you might break it and have an excuse