Windows Forum

Ask something
Discussion Locked

Prevent user from mapping to other works

0 helpful
8 replies

by schukwu

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
Does anyone know how I can prevent users who know local admin passwords from mapping to such workstations remotely.

8 replies

by admin

Options:

a: Disable file and print sharing on the workstations you don't want them to access,

b: Deny the administrator account for those local machines access under the share permissions.

c: Change the Administrator account passwords onthose local machines which they know the passwords to.

Cameron Savage
Piviksnetwork.com
Website Hosting Services
http://www.piviksnetwork.com/hosting/
admin@piviksnetwork.com

by schukwu

Option (a) does not work for NT systems
Option (b) will deny the administrator access even when logging on locally, so will not help
Option (c) will mean every workstation will have different local admin password. Policy requires single password for all.

by admin

funny, option b works fine for me here note I said Share level permissions not NTFS permissions there is a difference, please be more specific in your questions though...i did not see the NT os in your question.

by admin

option a does work on 2000 and xp which are NT systems, not to get picky or anything and on NT 4.0 option a is possible:

Go to Start -> Settings -> Control Panel.
Double-click Services.
Highlight the Server service and click Stop.
Click Startup and set to Disabled.
Click OK.
Click Close.

On 2k it is easier

Go to Start -> Settings -> Network and Dial-Up connections.
Double click the icon for Local Area Connection.
Click Properties.
Uncheck File and Print Sharing for Microsoft Networks.
Click OK.

by banyanman

Try this. First to re-emphasize the answer from admin@piviksnetwork.com's answer. When you go to the folder properties for a shared folder there are several tabs. One is called sharing and one is called security. On the sharing tab, remove "everyone" which is placed by default and add specifice groups of which administrator is not a member. Now the second thing you need to do is disable the admin shares, which by default, the security cannot be changed. To do this follow the instructions located at the link below. Remove any spaces in the URL. HTH
http://is-it-true.org/nt/atips/atips2.shtml

This discussion is closed to new replies.