Active Directory and Windows Network

[sno13]

Hi all,

I'm messing around with AD at home. Thinking about deploying it at work. My question is:

When a user clicks on Network Neighborhood, they see the Directory and Micorsoft Windows Network. I have the permissions set pretty good so far in that when they open up the Directory, they only see what they are allowed to see, but when they open up Microsoft Windows Netowrk, they see all the server shares. Isn't AD supposed to get rid of Windows Network? Why can my users see all the server shares? Permissions are set good, they can't open up the shares, but I don't even want them to see them. I'm probably just overlooking something simple, but I can't seem to find it. Any help is appreciated.

[tantone]

Can't you just hide the shares?

Example:
Sharename = $Office

[BBA]

AD is not there to hide conventional shares.

It is there to integrate shares to web url type addresses. This will allow anyone using AD shares to connect to their files even if the share is moved from one computer to another...the initial person will not have to change his share path.

Of course, there will always be monkeys in the trees! ( HAHAHAHA ) ( PUN INTENDED )

[sno13]

Thanks for the reply BBA.

On one of my previous attempts at installing AD, I had it set so users couldn't see the Windows Network. I didn't document the settings I chose on that installation so it is difficult for me to reproduce that situation. Any clues as to what I did or need to do to get that result again? Thanks for you monkey joke, too, BBA. http://www.sysopt.com/forum/smile.gif

[sno13]

Thanks for the reply.

Yes I can but that would get a little tedious, plus if someone else creates a share they may not know the $ hide. Also, some users know that one. Some don't but I mainly deal with Tech Sup users. Yes I should be able to trust them, but why give the option to get to a share if there is a way to completely block them out?

So the $ hide would have to be ruled out for now. Thanks for the reply!

[sno13]

Hi all,

I removed Client for Microsoft Networks from the workstation side. Took care of what I needed. Almost. Users can open the directory and only get to shares they are supposed to, but if they just click the 'up' button the can back up to all the shares. I guess this and a combination of $ hides will produce what I need. Thanks for your replies. I really appreciate them.

Bill

[cadetstimpy]

Go to the server hosting the shares. Right click My Computer and select manage. Expand shared files and folders. On any of the shares you've created right click and slect properties. There should be a security tab for the share itself. Here you can specify which users, groups, computers, etc the share will list for, allow modify, give full control etc.

[sno13]

Thanks cadetstimpy. I'll put Netbios back in and give that a shot this weekend. I'm pretty sure that is exactly what I am looking for. I appreciate your help.

Bill