I want to start building, I believe a base GPO to lock down the machines that will be on the network. How do I go about doing this. The first thing I want to do is disable file and print sharing for each machine that joins the domain.
Thanks in advance!
You could simply disable the server service with a group policy.
Computer Configuration\Windows Settings\Security Settings\System Services
Can you provide more detail about what you want? Do you just need to prevent people from creating shares?
If you don't give the users privileged access on the computer they use, then they won't be able to create shares.