This registry key controls the creation of the hidden, administrative
shares at the root of each partition (C$, D$, E$, ...) for workstations
(not servers)

-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]

Sent: Tuesday, June 22, 2004 11:26 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] GPO - File and Printer Sharing.





Hey Rick..

I'm not positive on this...but, i think this key controls that...

and you could write an adm file to do it.

[HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanmanServer\Param
aters]
"AutoShareWks"=dword:00000001

Have fun,
John



|---------+---------------------------------->
|         |           "Dale, Rick"           |
|         |           <[EMAIL PROTECTED]>         |
|         |           Sent by:               |
|         |           [EMAIL PROTECTED]|
|         |           tivedir.org            |
|         |                                  |
|         |                                  |
|         |           06/22/2004 01:19 PM    |
|         |           Please respond to      |
|         |           ActiveDir              |
|         |                                  |
|---------+---------------------------------->
 
>-----------------------------------------------------------------------
-----------------------------------------|
  |
|
  |       To:       "'[EMAIL PROTECTED]'"
<[EMAIL PROTECTED]>                                |
  |       cc:
|
  |       Subject:  RE: [ActiveDir] GPO - File and Printer Sharing.
|
 
>-----------------------------------------------------------------------
-----------------------------------------|





Thanks guys,

I have some users that are obstinate and they go in and turn off file
and
printer sharing which also takes the IPC$ share pipe off which then does
not
allow remote admin on their machine. So basically I wanted to be able to
force them to have it turn on. I guess if I manually enable it then
disable
access to the network config that would work.

Thanks again for your input.

Rick


-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
Sent: Tuesday, June 22, 2004 1:07 PM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] GPO - File and Printer Sharing.





Hey Rick...

You can turn off the server service, even with a GPO, but then no one
gets
there, not even admins...as far as i know.

It's a bit awkwards...but, in computer configuration/windows
settings/security settings/local policies/user rights assignments/deny
access to this computer from the network

You can specify a global group in there.....It's actually the opposite
of
what you want.  I think they can create shares, but group members can't
get
to them.

I really think this was an oversight from MS on the Group
Policies....I've
mentioned it to them several times.  I seem to remember you could do
this
with NT, and a system policy.

John





|---------+---------------------------------->
|         |           "Darren Mar-Elia"      |
|         |           <[EMAIL PROTECTED]|
|         |           om>                    |
|         |           Sent by:               |
|         |           [EMAIL PROTECTED]|
|         |           tivedir.org            |
|         |                                  |
|         |                                  |
|         |           06/22/2004 12:58 PM    |
|         |           Please respond to      |
|         |           ActiveDir              |
|         |                                  |
|---------+---------------------------------->

>-----------------------------------------------------------------------
----

-------------------------------------|
  |
|
  |       To:       <[EMAIL PROTECTED]>
|
  |       cc:
|
  |       Subject:  RE: [ActiveDir] GPO - File and Printer Sharing.
|

>-----------------------------------------------------------------------
----

-------------------------------------|





Rick-
No way that I know of to do this from GPO. The challenge is that its a
bunch of binary reg keys that get messed with when you turn this on or
off--per connection. I did a quick look through netsh and didn't see any
commands there, but I may have missed it. Alternatively, if you want to
shut it down completely, I think you can still turn off the Server
service,
which was the way to do it in NT 4. Probably need to test that though.

Darren

From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Dale, Rick
Sent: Tuesday, June 22, 2004 9:22 AM
To: '[EMAIL PROTECTED]'
Subject: [ActiveDir] GPO - File and Printer Sharing.



Hi,


I know there is a way to force enable or disable File Printer Sharing
but I
can not find it.


How do you force that via a GPO?


Thanks for the input.


Rick






List info   : http://www.activedir.org/mail_list.htm
List FAQ    : http://www.activedir.org/list_faq.htm
List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/
List info   : http://www.activedir.org/mail_list.htm
List FAQ    : http://www.activedir.org/list_faq.htm
List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/



List info   : http://www.activedir.org/mail_list.htm
List FAQ    : http://www.activedir.org/list_faq.htm
List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/

List info   : http://www.activedir.org/mail_list.htm
List FAQ    : http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

Reply via email to