03 June 2008

How can I disable Simple File Sharing centrally?


Question
How can I disable the Simple File Sharing setting centrally, rather than having to go to each client?

Answer
If the clients are part of a Windows* domain, you can apply a Group Policy to the clients that need to have this setting disabled.
To configure the Group Policy to disable this setting, browse to the following in the Group Policy Editor on a domain controller:
Local Computer Policy\Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Options\Network access: Sharing and security model for local accounts
Set this policy to Classic - local users authenticate as themselves.
When this policy applies to the client, it sets the following registry key to 0:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\forceguest

No comments: