Stop students browsing whole network

[zag]

Is there any way to stop the students browsing the "Whole Network"

 

At the moment they are simply clicking << NETWORK in the explorer browser bar from a desktop shared icon.

 

Any ideas?

[zag]

I'm even more confused after reading this technet article!

 

Disabling Network Discovery/Network Resources - Microsoft Enterprise Networking Team - Site Home - TechNet Blogs

 

Is there a simple service I can disable to stop the computers being listed?

[Max_Power]

You can hide machines via a net command in order to hide them from things like "NETWORK" command is.

net config server /hidden:yes

 

because of that you can deploy a registry entry to your machines and it will sort it via group policy.

KEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanmanServer\Parameters

Value name: Hidden

Data type: REG_DWORD

Value data: 1

[BHMS]

There is a group policy setting:

 

Admin Templates > Windows Components > File Explorer (Windows Explorer in Win 7 I think) > No Entire Network in Network Locations

 

Enable that one.

[zag]

You can hide machines via a net command in order to hide them from things like "NETWORK" command is.

net config server /hidden:yes

 

because of that you can deploy a registry entry to your machines and it will sort it via group policy.

KEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanmanServer\Parameters

Value name: Hidden

Data type: REG_DWORD

Value data: 1

 

Unfortunatly that looks like it no longer works with windows 7

 

net config server /hidden:yes command does not hide Windows 7 machines from being visible with network browser

[JJonas]

we did it this way Prevent users from seeing objects they cannot access with Access-Based Enumeration - TechRepublic

[zag]

There is a group policy setting:

 

Admin Templates > Windows Components > File Explorer (Windows Explorer in Win 7 I think) > No Entire Network in Network Locations

 

Enable that one.

 

Thanks already got that one set, but the students are clicking back to network via a shared folder link on their desktop.

[Max_Power]

Unfortunatly that looks like it no longer works with windows 7

 

net config server /hidden:yes command does not hide Windows 7 machines from being visible with network browser

 

Works fine here and with windows 7, 8 and MACs

[zag]

Works fine here and with windows 7, 8 and MACs

 

SUCCESS! Thanks, looks like it took a while to work.

 

How would you recommend rolling this out? Does it have any disadvantages?

[Max_Power]

SUCCESS! Thanks, looks like it took a while to work.

 

How would you recommend rolling this out? Does it have any disadvantages?

 

Not found any disadvantages here yet - we rolled out the reg clip via a group policy and ran the net command manually on servers to hide those.

[zag]

Not found any disadvantages here yet - we rolled out the reg clip via a group policy and ran the net command manually on servers to hide those.

 

Thanks this works brilliantly now, I can't believe I never knew about this!

 

Do you have a reg patch file by any chance that I could roll our via GPO?

[Max_Power]

Thanks this works brilliantly now, I can't believe I never knew about this!

 

Do you have a reg patch file by any chance that I could roll our via GPO?

 

The file we pushed out just contains the following;

 

Windows Registry Editor Version 5.00

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters]

"nameofregfile"=dword:00000001

[sonofsanta]

Thanks this works brilliantly now, I can't believe I never knew about this!

 

Do you have a reg patch file by any chance that I could roll our via GPO?

 

Can't you just do it with Group Policy Preferences in a computer GPO?

Action: Update

Hive: HKLM

Path: SYSTEM\CurrentControlSet\services\LanmanServer\Parameters

Value name: Hidden

Value type: REG_DWORD

Value data: 1

 

That's how I'm going to do it now I've read this thread, anyway