Turn off Printer and Folder collocation with GPO

Question

Hello,

We want to completely shut down file sharing on company computers. I did some research on this, but I couldn't find a result that exactly meets our requirements.

Our request;

All computers should not be able to share any files and printers even if the user is local admin or normal user.

Not only in user directories, but also in all directories on the computer.

Is there a definite solution for this?

Thank you for your support.

Answer 1

Hello,

May I know what methods you have tried to disable sharing? Are you in a domain environment?

You can try the following steps to disable file and printer sharing:

1. Disable firewall ports (ports 445 and 139). By disabling these ports, you can block SMB communication and thus disable file and printer sharing. Note that doing so may affect other features or services on the network. Before implementation, ensure that relevant tests and backup work are done.
2. Edit Group Policy:

Navigate to Computer Configuration > Windows Settings > Security Settings > Local Policies > Security Options.

Find and enable the policy "Network Access: Do not allow anonymous enumeration of SAM accounts and shares"

 

Reference:

SMB - File and printer sharing ports should be open | Microsoft Learn

Overview of file sharing using the SMB 3 protocol in Windows Server | Microsoft Learn

Best regards

Jacen

—————————————————————————————————

If the Answer is helpful, please click "Accept Answer" and upvote it.