Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

In a Win2008 Domain with Win7 clients, I need to block certain users/groups from browsing the internal network resources. Is there a GPO for that ?

share|improve this question
There are ways you can limit this by disabling entry points in Explorer, however, it shouldn't matter. Browsing the network only lets get you get into the things you have access to - you should ensure things are secure at the server side. This is even more true if you allow users to connect unmanaged devices to your network. – Dan Dec 14 '12 at 9:28
The ressources themselves have restricted access, that´s not the problem. I´d like it even more though, if the users couldn´t see a thing when clicking on "Network". – Jannis Alexakis Dec 14 '12 at 9:38
up vote 1 down vote accepted

Before Vista, there was a single GPO setting to remove the "My Network Places" icon. Surprisingly, there's no equivalent in Win7. Here's a technet blog article about how to do it with a combination of firewall settings and registry keys:

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.