通过SEP屏蔽共享文件夹

1. Go to Policies – Application and Device Control. Select default Application and Device Control policy. Click on Edit Policy.

? ?

1. In?Application and Device Control policy, go to Application control tap and select Block File Shares [AC11] and click on Edit button.

?

? ?

? ?

1. Select rule "[AC11-1.1] Block the Security and the Sharing tabs". In Apply to the following registry key delete last entry i.e. "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lanmanserver\Shares\*\*"

? ?

1. Add new condition. Right click on All Application – Add Condition – Launch Process Attempts. Name it as "Block Share Folder Wizard"

? ? ? ? ? ? ? ?

? ?

? ?

? ?

? ?

1. In Apply to following processes, Click on Add button and in process name match mention "shrpubw.exe" and click on OK.?

?????????????

1. Delete following highlighted rules:

? ?

? ?

? ?

? ?

? ?

? ?

1. Enable this Rule and assigned it to your OU.

通过SEP屏蔽共享文件夹

原文：http://www.cnblogs.com/IvanChen/p/4493617.html