By default users are allowed to share files within their profile to other users on their network once an administrator opts in the computer. An administrator can opt in the computer by using the sharing wizard to share a file within their profile.

If you enable this policy, users will not be able to share files within their profile using the sharing wizard. Also, the sharing wizard will not create a share at %root%\users and can only be used to create SMB shares on folders.

If you disable or don’t configure this policy, then users will be able to share files out of their user profile once an administrator has opted in the computer.

Prevent Users from Sharing Files within Their Profile

1. Type gpedit.msc in the Start menu’s search box and then press Enter.

   Note: This guide shows you how to make changes to Windows 7 using Group Policy. Group Policy is not available in Home versions of Windows 7.

2. Navigate to User Configuration, Administrative Templates, Windows Components, and then select Network Sharing in the left column of the Group Policy editor.

   ^[1]

3. Double-click Prevent users from sharing files within their profile in the Settings section of the Group Policy editor.
4. Select Enable and then click OK to save the changes.

   ^[2]