Sometimes a Workstation or Server has multiple network interfaces (because it's common to dual home servers right?). Since a network bridge allows a Layer 2 connection between two or more physical network segments, allowing data to be shared across networks, this is something that should often be avoided.
One way to accomplish this is via a Firewall (built-in or an additional piece of hardware). However, the ability to create a bridge can be disabled using Group Policy, and it is this mechanism that is detailed below.
Steps to enable/disable network bridging in Group Policy:
1) Create a new Group Policy Object (or choose the appropriate existing policy) and open for editing
2) Under the "Computer" section, navigate to: Policies / Administrative Templates / Network, and Network Connections
3) Open the "Prohibit installation and configuration of Network Bridge on your DNS domain network" setting
4) Set the policy as required:
a) To prevent a network bridge being created, click "Enabled"
b) To allow a network bridge to be created, click "Disabled"
5) Save the Group Policy
6) Apply the Group Policy to the relevant OU/Computer within your Active Directory structure.
