Prohibit computer sharing of files, prohibit domain users from sharing files, prohibit sharing computer files

Prohibit computer sharing of files, prohibit domain users from sharing files, prohibit sharing computer files
To disable network sharing, disable network sharing, and prohibit users from sharing folders, use the following methods:
First, check whether the shared file is set on the computer. The method is simple. Start-run-cmd, press enter, and enter "net share" under the doscommand, as shown in:

So how to disable it?
Use the following method.
Method 1: disable network sharing by using group policies to prohibit domain users from sharing folders and by using group policies to disable shared files.
1.1 create an adm configuration. Save the configuration as *. adm.
CLASS MACHINE
CATEGORY !! Category1
CATEGORY !! Category2
POLICY !! Policyname
EXPLAIN !! DefaultSharesExplain
KEYNAME "System \ CurrentControlSet \ Services \ LanManServer \ Parameters \"
VALUENAME "auto‑wks"
Valueon numeric 1
Valueoff numeric 0
END POLICY
END CATEGORY
END CATEGORY
[Strings]
Category1 = "Network"
Category2 = "Sharing"
Policyname = "AdministrativeShares"
Defaulttemporary sexplain = "Enables default workstation administrative shares if enabled or disables if disabled"
1.2 open the Group Policy console, create a new users GPO, and then edit.

1.3 right-click the management template and add the Template

Add the adm file.

1.4 after adm is added, locate the Group Policy to the classic ADM

1.5 if the template you just added already appears, right-click to enable stop share.

OK, this is done. Then, you only need to refresh the Group Policy on the client PC in the domain.
For domain management, it is more convenient to manage through group policies. However, the Group Policy is reversed by the user because the permissions of the operating system are used. You can enable shared file access. Therefore, we can consider another method.
Method 2: disable network sharing by using dedicated shared file access control software and shared folder management software.
At present, there are some computer file security management software in China, which integrates the management of computer shared files, can monitor and disable access to shared folders in real time, and prevent users from setting shared files. For example, there is a "portable to USB port management software" (: http://www.grabsun.com/monitorusb.html), is a computer can completely prohibit the use of U disk, mobile hard disk and mobile phone and other USB storage equipment software, at the same time, it can also prevent computer files from being sent by means of email, online storage, FTP file uploading, and QQ File Sending, thus completely protecting the security of computer files. Disabling software from the USB interface integrates a "file sharing prohibited" function. You only need to tick the function to prohibit the computer from setting shared files in real time, as shown in:

Figure: prohibiting computer file sharing
 
In addition, to prevent technical personnel from attempting to bypass system management by modifying the registry and group policies, the disabled to USB software also integrates the function of forbidding you to modify the registry, modifying the Group Policy, and disabling you to modify the startup item. This not only prevents your computer from setting shared files, it also protects the security of the operating system and software.
 
In short, to prohibit computers from sharing files and prevent leaks of shared files, on the one hand, it can be achieved through group policies, registries, and other operating system functions, on the other hand, it can also be achieved through some computer file management software. Which method can be used? Enterprises and institutions can choose based on their own needs.