Need a GPO to disable Network Discovery

Braul · 21 Sep 2010

Hi All,
Can someone show me how to make a GPO for domain joined windows 7 workstations that will disable Network discovery and File/Print Sharing for the Public Profile?

Ive seen the question asked a number of places, but I have not seen it answered.

Here are some threads Ive found while searching:

Disabling internal firewall enables F&P sharing

Disable network discovery on domain clients

Thank You!

merkat106 · 21 Sep 2010

Have you seen this article? Mark Minasi's Reader Forum - Enable Network Discovery in Vista

It might help you...

From the above article: WHERE IT SAYS ENABLE, SELECT DISABLE :)

In case you would like to enable LLTD and RSPNDR throughout the domain through Windows Server 2008 here are the steps:
1. Start Group Policy Management Console (GPMC). To do so Click Start, click Run, and then type gpmc.msc.
2. In the navigation Pane, open the following folders:
a. Forest
b. Domain
c. {Select the Domain that you would like to apply this policy to}
d. Group Policy Objects
e. Default Domain Policy
f. Computer Configuration
g. Policies
h. Administrative Templates
i. Network
j. Link-Layer Topology Discovery
3. In the details pane, double-click Turn on Mapper I/O (LLTDIO) Driver
a. To enable the responder component, click Enabled, and then select one or more of the following:
i. Allow operation while in domain
ii. Allow operation while in public network
iii. Prohibit operation while in private network
b. To disable the responder completely, click Disabled, and then click OK.
4. If you want to turn on the Responder Driver, in the details pane, double click Turn on Responder (RSPNDR) Driver.
a. To enable the responder component, click Enabled, and then select one or more of the following:
i. Allow operation while in domain
ii. Allow operation while in public network
iii. Prohibit operation while in private network
b. To disable the responder completely, click Disabled, and then click OK.
* - Be advised that Changing a Group Policy setting does not always immediately put the changed setting into effect. To ensure that the Group Policy setting is applied, either restart the computer that you want the Network Discovery Map on, or run gpupdate /force at a command prompt.

Braul · 22 Sep 2010

Hi merkat106, Thanks for the response.

I tried disabling the link layer topology discovery and the responder, but they both remain set to "on" on my test workstation.

Just to be clear, In the Network and Sharing center, on left pane click link that says Change advanced sharing settings, thats what Im trying to have turned off via GPO, the top 2 settings of the public profile.