Local admins

[Peter Clark]

disabled the server service (and computer browser) and set
permissions on the service to prevent them restarting it.

use tcp/ip filtering and do not include 139 tcp traffic.


>-----Original Message-----
>What version of windows are they running?
>Is this a corperate network? If so then you should make
>them log onto the domain and make them general users with
>special privelages.
>
>You can also create group policies to prevent them from
>doing various things also. I dont know what access they
>need but Im just throwing ideas in the air.
>
>Steve
>
>>-----Original Message-----
>>Does anyone have a way to lock out local admins from
>creating shares? I have
>>some developers that create shares without locking them
>down (ie. everyone )
>>.. These users are part of the local admin group,
>therefore complicating the
>>security. Is there a local gpo setting or registry key I
>can lock down?
>>appreciate your help or ideas...
>>
>>
>>Larry
>>
>>
>>.
>>
>.
>