The easiest way to prevent a user from altering the properties of a local DFS share is to use Group Policy.

Navigate to User Configuration / Administrative Templates / Windows Components / Windows Explorer. For Windows 2000, enable the Disable DFS tab GPO. For Windows XP / .Net, enable the Remove DFS tab GPO.

You can implement this policy via the registry:

1. Copy / Paste the following to a NoDFSTab.reg file:



2. Merge the NoDFSTab.reg file with the user's registry.