Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

In a Win2008 Domain with Win7 clients, I need to block certain users/groups from browsing the internal network resources. Is there a GPO for that ?

share|improve this question
1  
There are ways you can limit this by disabling entry points in Explorer, however, it shouldn't matter. Browsing the network only lets get you get into the things you have access to - you should ensure things are secure at the server side. This is even more true if you allow users to connect unmanaged devices to your network. –  Dan Dec 14 '12 at 9:28
    
The ressources themselves have restricted access, that´s not the problem. I´d like it even more though, if the users couldn´t see a thing when clicking on "Network". –  Jannis Alexakis Dec 14 '12 at 9:38

1 Answer 1

up vote 1 down vote accepted

Before Vista, there was a single GPO setting to remove the "My Network Places" icon. Surprisingly, there's no equivalent in Win7. Here's a technet blog article about how to do it with a combination of firewall settings and registry keys: http://blogs.technet.com/b/networking/archive/2010/12/06/disabling-network-discovery-network-resources.aspx

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.