Disable printer sharing (#12408)

As the title suggests. We already disable all communication between CI
nodes through network rules, but we currently get a lot of noise from
GCP logging violations to those rules from Windows trying to feel its
way out for file share buddies.

CHANGELOG_BEGIN
CHANGELOG_END

As usualy, this branch will contain intermediate commits that may serve
as an audit log of sorts.

infra/vsts_agent_windows.tf

@@ -13,13 +13,13 @@ locals {
       name       = "ci-w1",
       size       = 0,
       assignment = "default",
-      disk_size  = 200,
+      disk_size  = 400,
     },
     {
       name       = "ci-w2"
       size       = 6,
       assignment = "default",
-      disk_size  = 400
+      disk_size  = 400,
     },
   ]
 }
@@ -96,6 +96,9 @@ Set-MpPreference -DisableRealtimeMonitoring $true
 Stop-Service -Name Spooler -Force
 Set-Service -Name Spooler -StartupType Disabled
 
+# Disable File & Printer sharing
+Set-NetFirewallRule -DisplayGroup "File And Printer Sharing" -Enabled False -Profile Any
+
 # Enable long paths
 Set-ItemProperty -Path 'HKLM:\SYSTEM\CurrentControlSet\Control\FileSystem' -Name LongPathsEnabled -Type DWord -Value 1