Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I want to start building, I believe a base GPO to lock down the machines that will be on the network. How do I go about doing this. The first thing I want to do is disable file and print sharing for each machine that joins the domain.

Thanks in advance!

share|improve this question
up vote 2 down vote accepted

I want to disable file and print sharing for each machine

You could simply disable the server service with a group policy.

Computer Configuration\Windows Settings\Security Settings\System Services

Can you provide more detail about what you want? Do you just need to prevent people from creating shares?

If you don't give the users privileged access on the computer they use, then they won't be able to create shares.

share|improve this answer
Could you provide a bit more direction? If not I'll figure out a way to get 'er working. – Noah Clark Sep 21 '09 at 22:02
If you disable the server service though you won't be able to do remote computer management that requires access to IPC$ or admin$ on the PCs. – TheCleaner Sep 21 '09 at 22:06
This is a reasonable suggestion - however, this will also disable the default c$ and admin$ shares – Izzy Sep 21 '09 at 22:07
Which is something I'd rather not do... – Noah Clark Sep 21 '09 at 22:12

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.