+ Post New Thread
Results 1 to 6 of 6
Windows 7 Thread, Prevent entire network browsing on Windows 7 - How? in Technical; We have rolled-out Windows 7 to our school desktop PCs and all seems to be going well... The only problem ...
  1. #1
    adhutton's Avatar
    Join Date
    Dec 2008
    Location
    Northeast England
    Posts
    409
    Thank Post
    164
    Thanked 89 Times in 66 Posts
    Rep Power
    56

    Question Prevent entire network browsing on Windows 7 - How?

    We have rolled-out Windows 7 to our school desktop PCs and all seems to be going well...

    The only problem which I can't seem to find a fix for, at the moment, is to prevent users from browsing the entire network when saving documents from other programs (such as Word, Notepad etc...)

    For example, when a user creates a Word document and then clicks Save As they can see/browse to the entire network. That is the only place where they can browse the entire network, all other routes appear to be correctly blocked.

    I wish MS would be consistent with their application of Group Policies.....grrrrr.

    Does anyone have a fix for this please?

    Thanks_

    Andrew

  2. #2
    Pete10141748's Avatar
    Join Date
    Nov 2007
    Posts
    1,366
    Thank Post
    107
    Thanked 221 Times in 131 Posts
    Rep Power
    87
    Turn off Network Discovery in the Network & Sharing Center (under Advanced Sharing Setting).

    That might stop the machine from displaying anything when they click on the "Network" option in the toolbar when choosing a location to save to?

  3. #3
    adhutton's Avatar
    Join Date
    Dec 2008
    Location
    Northeast England
    Posts
    409
    Thank Post
    164
    Thanked 89 Times in 66 Posts
    Rep Power
    56
    Quote Originally Posted by Pete10141748 View Post
    Turn off Network Discovery in the Network & Sharing Center (under Advanced Sharing Setting).

    That might stop the machine from displaying anything when they click on the "Network" option in the toolbar when choosing a location to save to?
    Thanks -

    Is there a Group Policy which controls that?

    Andrew

  4. #4

    Join Date
    Mar 2011
    Location
    Bournemouth
    Posts
    280
    Thank Post
    16
    Thanked 74 Times in 64 Posts
    Rep Power
    22
    Computer Configuration > Policies > Administrative Templates > Network > Link-Layer Topology Discovery

    Use "Turn on Mapper I/O (LLTDIO) Driver" to disable for all profiles to prevent the machine from picking up other computers.
    Use "Turn on Responder (RSPNDR) Driver" to disable for all profiles to prevent the machine from being picked up by other computers.

    I know why you want to do this, but just for the record, it shouldn't be strictly necessary. There are plenty of other ways for a non-privileged user account to acquire a list of computers. This is not a substitute for properly securing your network enabled devices. If there is something users can access using network browsing they shouldn't be able to access then the problem is not with network browsing.

  5. Thanks to ChrisMiles from:

    zag (14th February 2014)

  6. #5

    FN-GM's Avatar
    Join Date
    Jun 2007
    Location
    UK
    Posts
    16,373
    Thank Post
    906
    Thanked 1,811 Times in 1,559 Posts
    Blog Entries
    12
    Rep Power
    468

  7. #6
    adhutton's Avatar
    Join Date
    Dec 2008
    Location
    Northeast England
    Posts
    409
    Thank Post
    164
    Thanked 89 Times in 66 Posts
    Rep Power
    56
    Quote Originally Posted by ChrisMiles View Post
    Computer Configuration > Policies > Administrative Templates > Network > Link-Layer Topology Discovery

    Use "Turn on Mapper I/O (LLTDIO) Driver" to disable for all profiles to prevent the machine from picking up other computers.
    Use "Turn on Responder (RSPNDR) Driver" to disable for all profiles to prevent the machine from being picked up by other computers.

    I know why you want to do this, but just for the record, it shouldn't be strictly necessary. There are plenty of other ways for a non-privileged user account to acquire a list of computers. This is not a substitute for properly securing your network enabled devices. If there is something users can access using network browsing they shouldn't be able to access then the problem is not with network browsing.
    Thanks for the info., but that doesn't appear to work either.

    Users can still browse to the network when choosing Save as in Word (and other software applications).

    Which settings are you using in Group Policy?

    Our network is secure in that users can only access what they are supposed to, but I still don't want them to be able to browse the network via this route as, in my opinion, they have no need to do so and it just invites potential trouble.

    Cheers - Andrew



SHARE:
+ Post New Thread

Similar Threads

  1. Sophos Network Install on Windows 7
    By Fatmas in forum Windows 7
    Replies: 23
    Last Post: 1st February 2011, 04:52 PM
  2. Replies: 4
    Last Post: 20th September 2010, 10:40 AM
  3. "How To" Guide for installing moodle on Windows 2003
    By darknova in forum Virtual Learning Platforms
    Replies: 6
    Last Post: 6th May 2008, 02:25 PM
  4. MAC on Windows Network
    By frankybaloney in forum Mac
    Replies: 7
    Last Post: 3rd May 2007, 02:52 PM
  5. Replies: 14
    Last Post: 9th March 2007, 12:53 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •