How do I disable simple file sharing on 100 computers with no GP?

[Guest]

I am a new network admin at a firm and I am limited by what the past admins
have done, for now! I need to disable the simple file sharing on all 100
computers, and would like to avoid walking to each one and unchecking the
box. Does anybody know the reg value I should change so I can script it into
the start up or, where it is hiddin in the security templates so I can mass
deploy it or, any other ideas.

 

[Doug Knox MS-MVP]

To make the change from the registry, open regedit and browse to:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa

Edit the ForceGuest REG_DWORD and change the value to decimal 1. Close the registry editor and the Security tab will be hidden again. The REG file to do this would be

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"forceguest"=dword:00000001


And could be imported by running REGEDIT /S <path to regfile\regfile.reg> as part of startup. The /S switch makes it happen with no user intervention. However, this would have to be done at a point in startup where the system is running under System credentials, and not a limited or Power User credentials, as they don't have the necessary permissions to make this change.

 

[Guest]

Doug Thank you for helping out. But i want to disable simple file sharing and
make the tab appear... i other words what is the reverse of the action you
discribed

To make the change from the registry, open regedit and browse to:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa

Edit the ForceGuest REG_DWORD and change the value to decimal 1. Close the registry editor and the Security tab will be hidden again. The REG file to do this would be

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"forceguest"=dword:00000001


And could be imported by running REGEDIT /S <path to regfile\regfile.reg> as part of startup. The /S switch makes it happen with no user intervention. However, this would have to be done at a point in startup where the system is running under System credentials, and not a limited or Power User credentials, as they don't have the necessary permissions to make this change.


--
Doug Knox, MS-MVP Windows Media Center\Windows Powered Smart Display\Security
Win 95/98/Me/XP Tweaks and Fixes
http://www.dougknox.com
--------------------------------
Per user Group Policy Restrictions for XP Home and XP Pro
http://www.dougknox.com/xp/utils/xp_securityconsole.htm
--------------------------------
Please reply only to the newsgroup so all may benefit.
Unsolicited e-mail is not answered.

I am a new network admin at a firm and I am limited by what the past admins
have done, for now! I need to disable the simple file sharing on all 100
computers, and would like to avoid walking to each one and unchecking the
box. Does anybody know the reg value I should change so I can script it into
the start up or, where it is hiddin in the security templates so I can mass
deploy it or, any other ideas.

 

[Doug Knox MS-MVP]

Set the forceguest value to 0, instead of 1.

--
Doug Knox, MS-MVP Windows Media Center\Windows Powered Smart Display\Security
Win 95/98/Me/XP Tweaks and Fixes
http://www.dougknox.com
--------------------------------
Per user Group Policy Restrictions for XP Home and XP Pro
http://www.dougknox.com/xp/utils/xp_securityconsole.htm
--------------------------------
Please reply only to the newsgroup so all may benefit.
Unsolicited e-mail is not answered.

Doug Thank you for helping out. But i want to disable simple file sharing and
make the tab appear... i other words what is the reverse of the action you
discribed

To make the change from the registry, open regedit and browse to:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa

Edit the ForceGuest REG_DWORD and change the value to decimal 1. Close the registry editor and the Security tab will be hidden again. The REG file to do this would be

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"forceguest"=dword:00000001


And could be imported by running REGEDIT /S <path to regfile\regfile.reg> as part of startup. The /S switch makes it happen with no user intervention. However, this would have to be done at a point in startup where the system is running under System credentials, and not a limited or Power User credentials, as they don't have the necessary permissions to make this change.


--
Doug Knox, MS-MVP Windows Media Center\Windows Powered Smart Display\Security
Win 95/98/Me/XP Tweaks and Fixes
http://www.dougknox.com
--------------------------------
Per user Group Policy Restrictions for XP Home and XP Pro
http://www.dougknox.com/xp/utils/xp_securityconsole.htm
--------------------------------
Please reply only to the newsgroup so all may benefit.
Unsolicited e-mail is not answered.

I am a new network admin at a firm and I am limited by what the past admins
have done, for now! I need to disable the simple file sharing on all 100
computers, and would like to avoid walking to each one and unchecking the
box. Does anybody know the reg value I should change so I can script it into
the start up or, where it is hiddin in the security templates so I can mass
deploy it or, any other ideas.