Re: Prevent Sharing drives on clients
- From: "Dave Britt" <davebritt@xxxxxxxxxxx>
- Date: Fri, 23 Jun 2006 17:42:28 +0100
Jordan,
You could use this script to temporarily remove the C$ share from the
machine, this would then be gone until the next reboot of the machine. This
would be re-enabled because of the autoshares reg key that generates Admin
Shares, which you cannot remove because you want to maintain the Admin$
share.
Script:
-------------------
strComputer = "."
Set objWMIService = GetObject("winmgmts:\\" & strComputer & "\root\cimv2")
Set colShares = objWMIService.ExecQuery _
("Select * from Win32_Share Where Name = 'C$'")
For Each objShare in colShares
objShare.Delete
Next
--------------------
The problem is that what ever you configure through Group Policy a user
with Local Administrator rights can remove if they have the knowledge and
will to do so.
--
Dave Britt
Dave's Weblog
http://davebritt.blogspot.com
"Jordan" <none@xxxxxxxx> wrote in message
news:%239tbsmglGHA.1972@xxxxxxxxxxxxxxxxxxxxxxx
I have a couple of users that need to be administrators on their local
computer (developing hardware and software). They keep sharing their hard
drive so they can access it from other computers which is a big no-no here.
Is there a GP that prevents creating new file shares but leaves the Admin$
share for remote management programs?
.
- Follow-Ups:
- Re: Prevent Sharing drives on clients
- From: Jordan
- Re: Prevent Sharing drives on clients
- References:
- Prevent Sharing drives on clients
- From: Jordan
- Prevent Sharing drives on clients
- Prev by Date: Re: Custom GPO Version Mismatch
- Next by Date: Re: Custom GPO Version Mismatch
- Previous by thread: Prevent Sharing drives on clients
- Next by thread: Re: Prevent Sharing drives on clients
- Index(es):
Relevant Pages
|