[monkkey]

По умолчанию у юзеров нет права на sharing
Group Policy - Computer Conf. - Windows Settings - Security Settings - Local Policies - User rights Assighnment - Create permanent shared objects - добавление возможности создавать шары юзерам. Убрать:
8046 » How do I prevent a member of the Windows 2000 Power Users group from creating or managing network shares? 18-May-04

To prevent a member of the Windows 2000 Power Users group from creating or managing network shares:
1. Copy / Paste the following into a SrvsvcShareFileInfo.reg file:

REGEDIT4

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lanmanserver\DefaultSecurity]
"SrvsvcShareFileInfo"=hex:01,00,04,80,88,00,00,00,94,00,00,00,00,00,00,00,14,\
00,00,00,02,00,74,00,04,00,00,00,00,00,1c,00,13,00,0f,00,01,02,00,00,00,00,\
00,05,20,00,00,00,20,02,00,00,00,00,00,00,00,00,1c,00,13,00,0f,00,01,02,00,\
00,00,00,00,05,20,00,00,00,25,02,00,00,00,00,00,00,00,00,1c,00,01,00,00,00,\
01,02,00,00,00,00,00,05,20,00,00,00,23,02,00,00,00,00,00,00,00,00,18,00,01,\
00,00,00,01,01,00,00,00,00,00,05,0b,00,00,00,23,02,00,00,01,01,00,00,00,00,\
00,05,12,00,00,00,01,01,00,00,00,00,00,05,12,00,00,00
2. Merge the SrvsvcShareFileInfo.reg file with the computer's registry, or run regedit /s SrvsvcShareFileInfo.reg.
3. Restart the Windows 2000 computer.