Block personal share but able to access domain share

Question

Hi Experts,

Request your help in blocking personal network share, nowadays users are working from home all have laptop and connecting via VPN thru their personal broadband but issue here is they are able to connect their personal computer share path on company laptop even they are connected to VPN and in this way user can copy official document from their company laptop to their personal computer share.

We need to block user to access their personal computer path but should be able to access domain share via VPN, i tried creating rule in firewall blocking 139 but its block both the network share (personal & domain share)

Answer 1

When they are connected with VPN, it makes them like they are connecting from inside the company.
You may consider set this policy:

User Configuration->Administrative Templates->Windows Components>Network Sharing and enable the policy states Prevent users from sharing files within their profile.