Hey Rick..
I'm not positive on this...but, i think this key controls that...
and you could write an adm file to do it.
[HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanmanServer\Paramaters]
"AutoShareWks"=dword:00000001
Have fun,
John
|---------+---------------------------------->
| | "Dale, Rick" |
| | <[EMAIL PROTECTED]> |
| | Sent by: |
| | [EMAIL PROTECTED]|
| | tivedir.org |
| | |
| | |
| | 06/22/2004 01:19 PM |
| | Please respond to |
| | ActiveDir |
| | |
|---------+---------------------------------->
>----------------------------------------------------------------------------------------------------------------|
|
|
| To: "'[EMAIL PROTECTED]'" <[EMAIL PROTECTED]>
|
| cc:
|
| Subject: RE: [ActiveDir] GPO - File and Printer Sharing.
|
>----------------------------------------------------------------------------------------------------------------|
Thanks guys,
I have some users that are obstinate and they go in and turn off file and
printer sharing which also takes the IPC$ share pipe off which then does
not
allow remote admin on their machine. So basically I wanted to be able to
force them to have it turn on. I guess if I manually enable it then disable
access to the network config that would work.
Thanks again for your input.
Rick
-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
Sent: Tuesday, June 22, 2004 1:07 PM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] GPO - File and Printer Sharing.
Hey Rick...
You can turn off the server service, even with a GPO, but then no one gets
there, not even admins...as far as i know.
It's a bit awkwards...but, in computer configuration/windows
settings/security settings/local policies/user rights assignments/deny
access to this computer from the network
You can specify a global group in there.....It's actually the opposite of
what you want. I think they can create shares, but group members can't get
to them.
I really think this was an oversight from MS on the Group Policies....I've
mentioned it to them several times. I seem to remember you could do this
with NT, and a system policy.
John
|---------+---------------------------------->
| | "Darren Mar-Elia" |
| | <[EMAIL PROTECTED]|
| | om> |
| | Sent by: |
| | [EMAIL PROTECTED]|
| | tivedir.org |
| | |
| | |
| | 06/22/2004 12:58 PM |
| | Please respond to |
| | ActiveDir |
| | |
|---------+---------------------------------->
>---------------------------------------------------------------------------
-------------------------------------|
|
|
| To: <[EMAIL PROTECTED]>
|
| cc:
|
| Subject: RE: [ActiveDir] GPO - File and Printer Sharing.
|
>---------------------------------------------------------------------------
-------------------------------------|
Rick-
No way that I know of to do this from GPO. The challenge is that its a
bunch of binary reg keys that get messed with when you turn this on or
off--per connection. I did a quick look through netsh and didn't see any
commands there, but I may have missed it. Alternatively, if you want to
shut it down completely, I think you can still turn off the Server service,
which was the way to do it in NT 4. Probably need to test that though.
Darren
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Dale, Rick
Sent: Tuesday, June 22, 2004 9:22 AM
To: '[EMAIL PROTECTED]'
Subject: [ActiveDir] GPO - File and Printer Sharing.
Hi,
I know there is a way to force enable or disable File Printer Sharing but I
can not find it.
How do you force that via a GPO?
Thanks for the input.
Rick
List info : http://www.activedir.org/mail_list.htm
List FAQ : http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
List info : http://www.activedir.org/mail_list.htm
List FAQ : http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
List info : http://www.activedir.org/mail_list.htm
List FAQ : http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/