Configuring Active Directory Domain Controller

If your organization uses an Active Directory domain controller, configure:

File and printer sharing options

Security options

For that, you can create a new group policy object (GPO) or change the parameters of an already existing object.

If you decided not to create a new object and to adjust the parameters of an existing one, open the window with appropriate settings.

Setting up file and printer sharing

Allow inbound requests from client computers. Enabling of this firewall exception rule opens UDP ports 137 and 138 as well as TCP port 445 to the IP addresses specified in the rule.

To allow file and printer sharing

1.In the navigation pane of the open window, expand the following: Computer ConfigurationPoliciesAdministrative TemplatesNetworkNetwork ConnectionsWindows FirewallDomain Profile.

2.In the details pane, double-click Windows Firewall: Allow inbound file and printer sharing exception and enable the rule.

3.In the Allow unsolicited incoming messages from these IP addresses text box, specify the required range of IP addresses.

4.Click ОК to save the changes.

Configuring security options

Configure Network access: Sharing and security model for local accounts policy so as to allow local users to authenticate as themselves over network.

To allow users to authenticate as themselves over network

1.In the navigation pane of the open window, expand the following: Computer ConfigurationPoliciesWindows SettingsSecurity SettingsLocal PoliciesSecurity Options.

2.For Network access: Sharing and security model for local accounts policy, set the value to Classic—local users authenticate as themselves.

Applying configuration changes

To apply these changes in domain policies (regardless of whether a new Group Policy Object was created or an existing Group Policy Object was configured), open the command prompt window and enter the following command: gpupdate/force.