This registry key controls the creation of the hidden, administrative shares at the root of each partition (C$, D$, E$, ...) for workstations (not servers)
-----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: Tuesday, June 22, 2004 11:26 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] GPO - File and Printer Sharing. Hey Rick.. I'm not positive on this...but, i think this key controls that... and you could write an adm file to do it. [HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanmanServer\Param aters] "AutoShareWks"=dword:00000001 Have fun, John |---------+----------------------------------> | | "Dale, Rick" | | | <[EMAIL PROTECTED]> | | | Sent by: | | | [EMAIL PROTECTED]| | | tivedir.org | | | | | | | | | 06/22/2004 01:19 PM | | | Please respond to | | | ActiveDir | | | | |---------+----------------------------------> >----------------------------------------------------------------------- -----------------------------------------| | | | To: "'[EMAIL PROTECTED]'" <[EMAIL PROTECTED]> | | cc: | | Subject: RE: [ActiveDir] GPO - File and Printer Sharing. | >----------------------------------------------------------------------- -----------------------------------------| Thanks guys, I have some users that are obstinate and they go in and turn off file and printer sharing which also takes the IPC$ share pipe off which then does not allow remote admin on their machine. So basically I wanted to be able to force them to have it turn on. I guess if I manually enable it then disable access to the network config that would work. Thanks again for your input. Rick -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: Tuesday, June 22, 2004 1:07 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] GPO - File and Printer Sharing. Hey Rick... You can turn off the server service, even with a GPO, but then no one gets there, not even admins...as far as i know. It's a bit awkwards...but, in computer configuration/windows settings/security settings/local policies/user rights assignments/deny access to this computer from the network You can specify a global group in there.....It's actually the opposite of what you want. I think they can create shares, but group members can't get to them. I really think this was an oversight from MS on the Group Policies....I've mentioned it to them several times. I seem to remember you could do this with NT, and a system policy. John |---------+----------------------------------> | | "Darren Mar-Elia" | | | <[EMAIL PROTECTED]| | | om> | | | Sent by: | | | [EMAIL PROTECTED]| | | tivedir.org | | | | | | | | | 06/22/2004 12:58 PM | | | Please respond to | | | ActiveDir | | | | |---------+----------------------------------> >----------------------------------------------------------------------- ---- -------------------------------------| | | | To: <[EMAIL PROTECTED]> | | cc: | | Subject: RE: [ActiveDir] GPO - File and Printer Sharing. | >----------------------------------------------------------------------- ---- -------------------------------------| Rick- No way that I know of to do this from GPO. The challenge is that its a bunch of binary reg keys that get messed with when you turn this on or off--per connection. I did a quick look through netsh and didn't see any commands there, but I may have missed it. Alternatively, if you want to shut it down completely, I think you can still turn off the Server service, which was the way to do it in NT 4. Probably need to test that though. Darren From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dale, Rick Sent: Tuesday, June 22, 2004 9:22 AM To: '[EMAIL PROTECTED]' Subject: [ActiveDir] GPO - File and Printer Sharing. Hi, I know there is a way to force enable or disable File Printer Sharing but I can not find it. How do you force that via a GPO? Thanks for the input. Rick List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/