group-policysmb-confwindows 7windows-server-2012
It's a little bit more complicated, I want to hide or deny use of the network location in Windows explorer to domain users, but I also need to give them access to mapped network devices and I can't disable network discovery because every user has a shared folder for update backup and scanner purposes.
Here's a screen capture to show what I want:
The idea is prevent users from wandering the net. Basic and curious users at least.
Just ran into this exact problem. Unidentified networks are by default set to type of "Public". This is awkward when you want Windows Firewall to be active on Public networks but not Private ones -- and your internal network is always "Unidentified".
What's an "Unidentified" network to Windows Server 2008?
The Network Lists service (netprofm) works with the Network Location Awareness service (nlasvc) to identify networks and find the associated saved settings for the network, if any. The NLA service will use a Default Gateway or SSID to identify a network, so if the NIC has neither a Default Gateway or associated SSID, then NLA will determine that the network is Unidentified.
You can however change the default -- so that so-called "Unidentified" networks will be defaulted to something other than Public:
Open Administrative Tools -> Local Security Policy.
Highlight the "Network List Manager Policies" item, then double click the "Unidentified Networks" on the right panel.
Set the "Location Type" to "Private" or "Public".
Worked for me!
That's a strange requirement but you can use the Software Restrictions functionallity of Group Policy to deny the user the ability to run the shrpubw.exe executable, which is the Windows File Sharing Wizard.
Best Answer
To hide the network node, you can create the following registry value on the computers:
Type: REG_DWORD
Data: 1
This will prevent Windows Explorer from listing this node.