group policies for simple file sharing.

[Guest]

is there a group policy to prohibit simple file sharing on computers joined
to a domain?

 

[Steven L Umbach]

By default it is disabled when a computer is joined to a domain. I suppose a
local administrator could change that so your best bet would be to try and
avoid making users local administrators. Beyond that you could enforce the
security option for network access: security and sharing model for local
accounts and select "classic" as the option. That could be done via domain
level Group Policy for domain computers under computer configuration/windows
settings/security settings/local policies/security options. Offhand I am not
sure if that would prevent a user from enabling simple file sharing or if it
would simply disable it at the next security policy refresh though that is
something you could test. Another thing you could do is to enforce the user
right for access this computer from the network so that it would NOT include
users or everyone but instead use authenticated users [assuming you want
such and not more restrictive] as that would prevent access to shares on
computers that have simple file sharing enabled. You can also remove a users
access to folder options via Group Policy. --- Steve