Automate granting share creation access to non-admins on Windows 7 in a domain
In Windows 7, standard (ie, non-admin) users can use the sharing wizard to create shares, but only after an administrator creates a single share using the sharing wizard. This is a bizarre requirement. I can't feasibly log into 500 computers, create a share, then delete it, in a reasonable amount of time, just to grant users the ability to create shares without elevation (most don't have an elevation account). The only GPO I can find that governs share creation is under User Configuration\Policies\Administrative Templates\Windows Components\Network Sharing, and is "Prevent users from sharing files within their profile." This is disabled under my domain, so sharing is granted. However, in the notes of this policy setting... By default users are allowed to share files within their profile to other users on their network once an administrator opts in the computer. An administrator can opt in the computer by using the sharing wizard to share a file within their profile. Is there any way to automate this process? A registry setting? Anything? Thanks!
January 24th, 2011 9:40am

Hi, Thanks for posting in Microsoft TechNet forums. As indicated in the group policy, I am sorry to say it is by design. Best Regards Magon Liu TechNet Subscriber Support in forum. If you have any feedback on our support, please contact tngfb@microsoft.com Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
Free Windows Admin Tool Kit Click here and download it now
January 25th, 2011 5:05am

I kind of figured there was no way to do this via GPO as I'm guessing whatever "tickling" is done from the admin setting up a share is outside the policy registry locations. That said, I find it hard to imagine that whatever it is that is done behind the scenes cannot be automated in some way. I'm guessing it's just a series of registry changes, maybe some WMI or something... But that's the kicker. What's the secret sauce? How do we get Windows into that "it's okay for users to make shares" state, without having to have an admin literally log into each and every of 300 workstations? I don't care if it's a hack. I just want a way to do it!
January 25th, 2011 8:32pm

Please check if the following registry existed on your computer: HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\SharingWizardOn Regards,Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
Free Windows Admin Tool Kit Click here and download it now
January 27th, 2011 1:43am

Hi, Thanks for posting in Microsoft TechNet forums. As this thread has been quiet for a while, we assume that the issue has been resolved. At this time, we will mark it as ‘Answered’ as the previous steps should be helpful for many similar scenarios. If the issue still persists, please feel free to reply this post directly so we will be notified to follow it up. You can also choose to unmark the answer as you wish. BTW, we’d love to hear your feedback about the solution. By sharing your experience you can help other community members facing similar problems. Thanks for your understanding and efforts. Best Regards Magon Liu TechNet Subscriber Support in forum. If you have any feedback on our support, please contact tngfb@microsoft.com Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
February 1st, 2011 4:18am

It's been quiet for two days and you guys automatically accept an answer? That's a bit of a itchy trigger finger, no?
Free Windows Admin Tool Kit Click here and download it now
February 1st, 2011 9:10am

Yes, HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\SharingWizardOn exists. I've tried setting it to 0 or 1. This does not seem to make a difference except in the UI. I still need to share a folder at least once with an admin first.
February 1st, 2011 12:32pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics