Disallow Share Browsing

  • Thread starter Thread starter Jim Matthews
  • Start date Start date
J

Jim Matthews

I run a small W2K SP4 network.

I would like to restrict my users (non-administrators) to connecting to
shares by name only.

That is, I do not want them to be able to "browse" what shares are available
by typing in the \\servername in the Run command.

I have no problems with allowing them to connect to \\servername\customers -
I just want them to have to know there is a share named "customers"

How do I go about this ?

Thanks in advance

JM
 
If you end the share name with a $ sign it will not be visible while browsing

So instead of \\servername\customers use \\servername\customers

-
Regards
Tibor Biro (tiborbiro@_NO_SPAM_rogers.com - remove _NO_SPAM_
MCSE, MCDBA, MCS
 
Whle not 100 percent effective you could try to use Group Policy to
restrict their access to My Network Places and such. The probelm is that
still leaves a lot of backdoors via creating shortcuts, etc. You could
extremely lock down the desktop, but that may make their computer marginally
useful. Bottom line is you have to rely on share and ntfs permissions to
keep users from accessing shares that they should not have access to. In a
pure ADS network with all W2K/XP/W2003 computers it may be possible to
disable netbio over tcp/ip and use only Active Directory to locate network
resources at which point users would not even be able to see shares unless
they had read permissions to that AD object. --- Steve
 
Back
Top