Restrict UNC share access
Hi guys, I want to restrict a particular user(in workgroup) from accessing the shares on my server, I searched in the internet & found to modify a registry key in HKLM. But its getting applied to all users..!
can any1 help...
September 10th, 2010 10:59am
To restrict acces to users, you should use share permissions and/or ntfs file permissions. You can hide a share to users by ending the sharename with "$".
Settings made in HKLM are machine settings, they are in place for all users on the system. A key in HKLM (Hkey_LocalMachine) cannot work for just 1 user. Keys with settings for specific users are located in HKU (Hkey_users), where each logged
on user has it's own "folder". This folder us mapped to HKCU (Hkey_CurrentUser) for the user you are currently logged on with.MCP/MCSA/MCTS/MCITP
Free Windows Admin Tool Kit Click here and download it now
September 10th, 2010 11:54am
Hello Ashwin,
If the computer is running Windows Vista or later, I suggest you configure UNC restriction by using MLGPOs. You need to log on to
the computer using an account that has administrator privileges in order to use Group Policy Editor, please follow the steps below.
1.
Click
Start, and then click Run.
2.
In the
Open box, type mmc, and then click OK.
3.
On the
File menu, click Add/Remove Snap-in.
4.
Click
Add.
5.
Under
Add or Remove Snap-ins, click Group Policy Object Editor, and then click
Add.
6.
If you want to edit the specific local user policy, click
Browse to locate the group policy object under Users tab that you want. Supply your user name and password if prompted, and then when you return to the
Select Group Policy Object dialog box, click Finish.
7.
Click
Close, and then in the Add/Remove Snap-in dialog box, click
OK.
8.
Navigate to
User Configuration\Administrative Templates\Start Menu and Taskbar, then enable
Remove Run menu from Start Menu setting.
Note: If the above setting is enabled, the user will be blocked from entering a UNC path.
Step-by-Step Guide to Managing Multiple Local Group Policy Objects
http://technet.microsoft.com/en-us/library/cc766291(WS.10).aspx
Managing Windows Vista Group Policy
http://www.windowsecurity.com/articles/Managing-Windows-Vista-Group-Policy-Part2.html
Brent Hu,
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread. ”
September 13th, 2010 11:38am