Server Series 17: How does one disable domain user default sharing through group policies?

 

How does one disable domain user default sharing through group policies?

 

The default share feature facilitates some management work, but it does pose a major risk. You can also run the following command to check whether the local PC has enabled the default share feature.

 

 

650) this. width = 650; "src =" http://img1.51cto.com/attachment/201304/171147743.png "border =" 0 "/>

So how to disable it?

Use the following method.

1.1 create an adm configuration. Save the configuration as *. adm.

 

 
 

  
  
CLASS MACHINE  
  
  
CATEGORY !!category1  
  
  
CATEGORY !!category2  
  
  
POLICY !!policyname  
  
  
EXPLAIN !!DefaultSharesExplain  
  
  
KEYNAME “System\CurrentControlSet\Services\LanManServer\Parameters\”  
  
  
VALUENAME “AutoShareWks”  
  
  
VALUEON NUMERIC 1  
  
  
VALUEOFF NUMERIC 0  
  
  
END POLICY  
  
  
END CATEGORY  
  
  
END CATEGORY  
  
  
[strings]  
  
  
category1=”Network”  
  
  
category2=”Sharing”  
  
  
policyname=”AdministrativeShares”  
  
  
DefaultSharesExplain=”Enables default workstation administrative shares if enabled or disables if disabled”  
 
 

1.2 open the Group Policy console, create a new users GPO, and then edit.

 

650) this. width = 650; "src =" http://www.bkjia.com/uploads/allimg/131227/1Z93052U-1.png "border =" 0 "/>

1.3 right-click the management template and add the Template

 

 

650) this. width = 650; "src =" http://www.bkjia.com/uploads/allimg/131227/1Z93023b-2.png "border =" 0 "/>

 

Add the adm file.

 

 

650) this. width = 650; "src =" http://www.bkjia.com/uploads/allimg/131227/1Z9305R4-3.png "border =" 0 "/>

 

1.4 after adm is added, locate the Group Policy to the classic ADM

 

650) this. width = 650; "src =" http://www.bkjia.com/uploads/allimg/131227/1Z9305E6-4.png "border =" 0 "/>

1.5 if the template you just added already appears, right-click to enable stop share.

 

650) this. width = 650; "src =" http://www.bkjia.com/uploads/allimg/131227/1Z93063Z-5.png "border =" 0 "/>

 

OK, this is done. Then, you only need to refresh the Group Policy on the client PC in the domain.

 

For domain management, it is more convenient to manage through group policies.

 

This article is from the "server & security" blog, please be sure to keep this source http://ciscoart.blog.51cto.com/1066670/1176226