Disable discovery XP computer
Hi All, We do not want users to see the other XP computers name from My Network on their XP computer. Before I disable File and Printer sharing from Microsoft Netowrks from Network , and disable File and Printer sharing from Windows Firewall. Becasue we installed Symantec EndPoint 11.0 for client, it requires to enable File and printer sharing, also, Symantec EndPoint has their own Firewall setting which is override Windows Firewall. In Symantec EndPoint, I block local file sharing from Firewall policy, but I still can see the computer name which list in My Network, I could not access it when I click the computer name in My network. Is any way which I can use to fix the problem? Can I use Group Policy? Thanks in advance,
January 12th, 2011 3:28pm

Hello, you can start disabling the computer browser service vith GPO settings about the computer configuration part on the services. Additional you maybe have to disable NetBios over TCP/IP on the NIC, maybe with scripting solutions.Best regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.
Free Windows Admin Tool Kit Click here and download it now
January 12th, 2011 4:48pm

Hi, You don't have to disable File and Printer sharing . Please following the Meinolf's suggestion and you can disable NetBios over TCP/IP on the NIC option via script: http://social.technet.microsoft.com/Forums/en/winserverPN/thread/c5f3c095-1ad2-4963-b075-787f800b81f2 Thanks. Tiger LiPlease remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
January 13th, 2011 3:27am

Hi Meinolf, Thank you so much for your help. Regarding your GPO sulotion, I find out the path in GPO, Computer Configuration > Windows Settings > Security Settings> System Services > Computer Browser, and disable it. Is it Right? Regarding the Computer Browser System Service, I notices that the Computer Browser service is used by Windows-based computers to view network domains and resources. Computers that are designated as browsers maintain browse lists that contain all shared resources that are used on the network. So, if I disable computer browser service for all of my client computers, that means that all of my client computers will not be able to view any network computers at all. right? If it is right, it is not what I want to do. What I want to do is that I want to control which computers or servers will be appear on My Network. All client computers can view certain servers or computers from My Network, but not all of them. For example, I would like file server and share client computers will be list on My Network, but most of client computers which I don't want to be list on My Network. Can you give me any idea? Thanks a lot.
Free Windows Admin Tool Kit Click here and download it now
January 13th, 2011 11:25am

Hi Tiger, Thank you so much for your answer. I have post a question about GPO solution. I would appreciate if you could give me some suggestion. Thanks
January 13th, 2011 11:28am

What I want to do is that I want to control which computers or servers will be appear on My Network. All client computers can view certain servers or computers from My Network, but not all of them. For example, I would like file server and share client computers will be list on My Network, but most of client computers which I don't want to be list on My Network. Can you give me any idea? Thanks a lot. i dont think you can do this. You have understand how the computer browser service works and how it queries and collects the information. Domain controller would be configured as Master browser which distributes the browse list across the clients / workgroup clients. So your client obtain the list from your server ( getbackuplist )and populates in your network neighborhood . Please not all of this process is automated and doesnt require any modification of registry or restarting of service. Which is the reason meinolf mentioned to stop the browser service on the client which will not advertise themselves and your list doesnt have the computers listed. Also careful consideration should be taken care when you are trying to populate clients / servers across subnets, in which you should have master browsers in each site exchanging the list , you should make sure you allow NETBIOS broadcasts
Free Windows Admin Tool Kit Click here and download it now
January 13th, 2011 10:38pm

Hi All, Thank you so much for your explain and help me to have a solution.
January 18th, 2011 10:51am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics