PDA

View Full Version : How do I disable simple file sharing on 100 computers with no GP?


Spikie304
August 24th 06, 06:38 PM
I am a new network admin at a firm and I am limited by what the past admins
have done, for now! I need to disable the simple file sharing on all 100
computers, and would like to avoid walking to each one and unchecking the
box. Does anybody know the reg value I should change so I can script it into
the start up or, where it is hiddin in the security templates so I can mass
deploy it or, any other ideas.

Doug Knox MS-MVP
August 24th 06, 07:00 PM
To make the change from the registry, open regedit and browse to:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\Lsa

Edit the ForceGuest REG_DWORD and change the value to decimal 1. Close the registry editor and the Security tab will be hidden again. The REG file to do this would be

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\Lsa]
"forceguest"=dword:00000001


And could be imported by running REGEDIT /S <path to regfile\regfile.reg> as part of startup. The /S switch makes it happen with no user intervention. However, this would have to be done at a point in startup where the system is running under System credentials, and not a limited or Power User credentials, as they don't have the necessary permissions to make this change.


--
Doug Knox, MS-MVP Windows Media Center\Windows Powered Smart Display\Security
Win 95/98/Me/XP Tweaks and Fixes
http://www.dougknox.com
--------------------------------
Per user Group Policy Restrictions for XP Home and XP Pro
http://www.dougknox.com/xp/utils/xp_securityconsole.htm
--------------------------------
Please reply only to the newsgroup so all may benefit.
Unsolicited e-mail is not answered.

"Spikie304" > wrote in message ...
>I am a new network admin at a firm and I am limited by what the past admins
> have done, for now! I need to disable the simple file sharing on all 100
> computers, and would like to avoid walking to each one and unchecking the
> box. Does anybody know the reg value I should change so I can script it into
> the start up or, where it is hiddin in the security templates so I can mass
> deploy it or, any other ideas.

Spikie304
August 24th 06, 09:03 PM
Doug Thank you for helping out. But i want to disable simple file sharing and
make the tab appear... i other words what is the reverse of the action you
discribed

"Doug Knox MS-MVP" wrote:

> To make the change from the registry, open regedit and browse to:
>
> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\Lsa
>
> Edit the ForceGuest REG_DWORD and change the value to decimal 1. Close the registry editor and the Security tab will be hidden again. The REG file to do this would be
>
> Windows Registry Editor Version 5.00
>
> [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\Lsa]
> "forceguest"=dword:00000001
>
>
> And could be imported by running REGEDIT /S <path to regfile\regfile.reg> as part of startup. The /S switch makes it happen with no user intervention. However, this would have to be done at a point in startup where the system is running under System credentials, and not a limited or Power User credentials, as they don't have the necessary permissions to make this change.
>
>
> --
> Doug Knox, MS-MVP Windows Media Center\Windows Powered Smart Display\Security
> Win 95/98/Me/XP Tweaks and Fixes
> http://www.dougknox.com
> --------------------------------
> Per user Group Policy Restrictions for XP Home and XP Pro
> http://www.dougknox.com/xp/utils/xp_securityconsole.htm
> --------------------------------
> Please reply only to the newsgroup so all may benefit.
> Unsolicited e-mail is not answered.
>
> "Spikie304" > wrote in message ...
> >I am a new network admin at a firm and I am limited by what the past admins
> > have done, for now! I need to disable the simple file sharing on all 100
> > computers, and would like to avoid walking to each one and unchecking the
> > box. Does anybody know the reg value I should change so I can script it into
> > the start up or, where it is hiddin in the security templates so I can mass
> > deploy it or, any other ideas.
>

Doug Knox MS-MVP
August 25th 06, 02:08 AM
Set the forceguest value to 0, instead of 1.

--
Doug Knox, MS-MVP Windows Media Center\Windows Powered Smart Display\Security
Win 95/98/Me/XP Tweaks and Fixes
http://www.dougknox.com
--------------------------------
Per user Group Policy Restrictions for XP Home and XP Pro
http://www.dougknox.com/xp/utils/xp_securityconsole.htm
--------------------------------
Please reply only to the newsgroup so all may benefit.
Unsolicited e-mail is not answered.

"Spikie304" > wrote in message ...
> Doug Thank you for helping out. But i want to disable simple file sharing and
> make the tab appear... i other words what is the reverse of the action you
> discribed
>
> "Doug Knox MS-MVP" wrote:
>
>> To make the change from the registry, open regedit and browse to:
>>
>> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\Lsa
>>
>> Edit the ForceGuest REG_DWORD and change the value to decimal 1. Close the registry editor and the Security tab will be hidden again. The REG file to do this would be
>>
>> Windows Registry Editor Version 5.00
>>
>> [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\Lsa]
>> "forceguest"=dword:00000001
>>
>>
>> And could be imported by running REGEDIT /S <path to regfile\regfile.reg> as part of startup. The /S switch makes it happen with no user intervention. However, this would have to be done at a point in startup where the system is running under System credentials, and not a limited or Power User credentials, as they don't have the necessary permissions to make this change.
>>
>>
>> --
>> Doug Knox, MS-MVP Windows Media Center\Windows Powered Smart Display\Security
>> Win 95/98/Me/XP Tweaks and Fixes
>> http://www.dougknox.com
>> --------------------------------
>> Per user Group Policy Restrictions for XP Home and XP Pro
>> http://www.dougknox.com/xp/utils/xp_securityconsole.htm
>> --------------------------------
>> Please reply only to the newsgroup so all may benefit.
>> Unsolicited e-mail is not answered.
>>
>> "Spikie304" > wrote in message ...
>> >I am a new network admin at a firm and I am limited by what the past admins
>> > have done, for now! I need to disable the simple file sharing on all 100
>> > computers, and would like to avoid walking to each one and unchecking the
>> > box. Does anybody know the reg value I should change so I can script it into
>> > the start up or, where it is hiddin in the security templates so I can mass
>> > deploy it or, any other ideas.
>>

Google