Solved

Hiding my network places in the file open dialog box

Posted on 2004-08-13
9
2,614 Views
Last Modified: 2013-12-04
I have a windows 2000 domain running AD with group policy implemented.  When users on the domain run any program in MS office and they go to file-->open they are able to see my network places and are able to expand it and see all machines in the domain.   How do I disable my network places from appearing in the MS office file-->open dialog box using group policy?
0
Comment
Question by:GPEARL383
  • 4
  • 4
9 Comments
 
LVL 83

Expert Comment

by:oBdA
ID: 11797110
You can remove the network neighborhood by activating the following policies:
User Configuration\Administrative Templates\Windows Components\Windows Explorer
* Remove options "Map network drive" and "Delete network drive"
* Don't show "Workgroup Contents" in Network Neighborhood
* Don't show "Entire Network" in Network Neighborhood
(Note that these are not the exact names, as I am not using an English version).

In addition, you can remove the complete "Places" bar with
User Configuration\Administrative Templates\Windows Components\Windows Explorer\Standard Dialog
* Remove places bar in standard dialogs
0
 
LVL 12

Expert Comment

by:gidds99
ID: 11799475
You can hide this via the registry:

http://www.winguides.com/registry/display.php/542/

This one may be relevant to your situation also:

http://www.winguides.com/registry/display.php/862/

Hope this helps.
0
 

Author Comment

by:GPEARL383
ID: 11833295
oBda - I tried to modify the GP settings like you said but the problems still exist.  Users can gain access when they are in an office program like word, open a file and then select the dropdown list.  Do you think these setting need to be modifyed in the MS OFFICE group policy templates?
0
 
LVL 83

Expert Comment

by:oBdA
ID: 11834802
Which Office version is this? I have a custom policy template someplace with which you can set the Office places bar.
0
What Should I Do With This Threat Intelligence?

Are you wondering if you actually need threat intelligence? The answer is yes. We explain the basics for creating useful threat intelligence.

 

Author Comment

by:GPEARL383
ID: 11835641
office 2000
0
 

Author Comment

by:GPEARL383
ID: 11835693
This is whats happening: say a user is in excel2000, they go to file-open and then the file dialog box comes up.  When they go to the dropdown list to select what drive they want eg (the network drive, their H:\ drive which is home folder etc...) it will also come up with my network places etc.  Here it what is causing the problem...becasue if you select my network places certain users are able to see machines in domain including our servers.  From there if there are shared drives (that are not admin shares $) they are able to see shared drives and can gain access to info i dont want them to have....what do you think about this.  

Another thing i just relized is that this is just happening in excel...not other office programs....do you think this could be in the excel group policy template.  I have them installed and configured but maybee i missed something in the excel template???
0
 
LVL 83

Expert Comment

by:oBdA
ID: 11835985
Save this as PlacesBar.adm (or whatever.adm), import it into the GPO of your choice. Note that these are not "real" group policies, it's what Microsoft calls in changing terms "preferred settings", "branding", or "tattoing", as these changes are written to the registry outside of the \policies\ keys. This means that settings configured with this template will *not* simply "go away" (like group policies) if you set the policy to "not configured", these settings need to be explicitly undone, as back in NT4 and system policies.
If you see only the folders in the GP editor, but no policies to configure, you need to highlight the "Administrative Templates" key, then go to the "View" menu and uncheck "Show group policies only".
As usual: No warranties included, use it at your own risk, test it before you apply it in earnest:

====8<----[PlacesBar.adm]----
CLASS USER

CATEGORY "Additional Settings"

  CATEGORY "Microsoft Office 2000"

    CATEGORY "Places Bar"

      POLICY "Use small symbols"
        KEYNAME "Software\Microsoft\Office\9.0\Common\Open Find\Places"
        VALUENAME "ItemSize"
        VALUEON NUMERIC 0
        VALUEOFF NUMERIC 1
      END POLICY ; "Use small symbols"

      POLICY "Hide Desktop Icon"
        KEYNAME "Software\Microsoft\Office\9.0\Common\Open Find\Places\StandardPlaces\Desktop"
        VALUENAME "Show"
        VALUEON NUMERIC 0
        VALUEOFF DELETE
      END POLICY ; "Hide Desktop Icon"

      POLICY "Hide Favorites Icon"
        KEYNAME "Software\Microsoft\Office\9.0\Common\Open Find\Places\StandardPlaces\Favorites"
        VALUENAME "Show"
        VALUEON NUMERIC 0
        VALUEOFF DELETE
      END POLICY ; "Hide Favorites Icon"

      POLICY "Hide 'My Documents' Icon"
        KEYNAME "Software\Microsoft\Office\9.0\Common\Open Find\Places\StandardPlaces\MyDocuments"
        VALUENAME "Show"
        VALUEON NUMERIC 0
        VALUEOFF DELETE
      END POLICY ; "Hide 'My Documents' Icon"

      POLICY "Hide Network Icon"
        KEYNAME "Software\Microsoft\Office\9.0\Common\Open Find\Places\StandardPlaces\Publishing"
        VALUENAME "Show"
        VALUEON NUMERIC 0
        VALUEOFF DELETE
      END POLICY ; "Hide Network Icon"

      POLICY "Hide Recent Icon"
        KEYNAME "Software\Microsoft\Office\9.0\Common\Open Find\Places\StandardPlaces\Recent"
        VALUENAME "Show"
        VALUEON NUMERIC 0
        VALUEOFF DELETE
      END POLICY ; "Hide Recent Icon"

    END CATEGORY ; "Places Bar"

  END CATEGORY ; "Microsoft Office 2000"

END CATEGORY ; "Additional Settings"
====8<----[PlacesBar.adm]----
0
 
LVL 83

Accepted Solution

by:
oBdA earned 500 total points
ID: 11836127
If I set the three policies I mentioned before, the "Network Neighborhood" symbol still shows up in the drop down box, but it's completely empty, and you can't browse anymore (tested it in Word and Excel XP).
However, all those settings affect only the Explorer. If people can get access to a command prompt, they can still map drives. The best way to secure shares is to set the proper NTFS permissions; then they can access the share all they want, it won't help much ...
0
 

Author Comment

by:GPEARL383
ID: 11837719
Im going to test out what you gave me in my test envir.  But for now i agree that i am just going to set NTFS permissions and they wont be able to go anywhere...Thanks for input

GSP
0

Featured Post

Get up to 2TB FREE CLOUD per backup license!

An exclusive Black Friday offer just for Expert Exchange audience! Buy any of our top-rated backup solutions & get up to 2TB free cloud per system! Perform local & cloud backup in the same step, and restore instantly—anytime, anywhere. Grab this deal now before it disappears!

Join & Write a Comment

Many of us in IT utilize a combination of roaming profiles and folder redirection to ensure user information carries over from one workstation to another; in my environment, it was to enable virtualization without needing a separate desktop for each…
Article by: btan
The intent is not to repeat what many has know about Ransomware but more to join its dots of what is it, who are the victims, why it exists, when and how we respond on infection. Lastly, sum up in a glance to share such information with more to help…
Excel styles will make formatting consistent and let you apply and change formatting faster. In this tutorial, you'll learn how to use Excel's built-in styles, how to modify styles, and how to create your own. You'll also learn how to use your custo…
This video explains how to create simple products associated to Magento configurable product and offers fast way of their generation with Store Manager for Magento tool.

762 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

22 Experts available now in Live!

Get 1:1 Help Now