RE: Prevent use of Open Share

Uninstall F&P Sharing and throw a GP at the users that prevents them from
using most "dangerous" control panel items.  In a LAN of 8000 computers, I
don't see a need to open shares up on the clients, this should all be done
on the server.

Mike Fetherston

> -----Original Message-----
> From: Alex Harasic Gil [mailto:alharasic@mi.cl]
> Sent: Wednesday, August 24, 2005 2:56 PM
> To: security-basics@securityfocus.com
> Subject: Prevent use of Open Share
>
> Hi, the company I'm working for has over 8,000 PCs
> connected to the corporate LAN. We need to find a way to
> prevent users from creating Open Shares with full-access
> permissions on the Windows 2000 network.
>
> Basic users, don't know how to apply control access to the
> shares they're sharing. So, there's also an education
> process we need to carry on.
>
> But for a first instance, how can I do to lock the use of
> public open shares on the windows 2000 Domain? Domain
> Policy, GPO?, is there any way to detect the use of them
> other than scanning for open shares?.
>
> Regards
>
> Alex S. Harasic
> alharasic@mi.cl