Remove File Sharing From Workstations in AD 2003

[TecGuy]

I'm running windows 2003 active Directory. Is there a way using Group Policy or other to remove file sharing from users computers?

We want to stop people from being able to create shares from their local computers.

let me know.

Thanks,

 

[HessA]

This isn't a GPO solution but if they aren't admins/powerusers of the local machine I don't think they have the right to create shares. I could be wrong I can't verify it at the moment. But I think I am correct.

Aaron

 

[TecGuy]

Yes, but that solution brings other problems. Some of these guys are developers and need access to the machine for installs etc.. I wasn't sure if there was a way to control this without removing admin rights from the local machine.

Anyone else have any suggestions?

Thanks for the reply.

Another option was remove file and print sharing but that created a whole slew of problems. Not a vaild option for us.

 

[HessA]

Tecguy,

I feel your pain my CAD/Solidworks designers it's the same issue. Even as powerusers they don't have all the rights to run everything they need so I have to make them admins. I know there's a better way to handle but haven't had time to figure it out and implement it.

Aaron