Solved

Hiding my network places in the file open dialog box

Posted on 2004-08-13
9
2,629 Views
Last Modified: 2013-12-04
I have a windows 2000 domain running AD with group policy implemented.  When users on the domain run any program in MS office and they go to file-->open they are able to see my network places and are able to expand it and see all machines in the domain.   How do I disable my network places from appearing in the MS office file-->open dialog box using group policy?
0
Comment
Question by:GPEARL383
  • 4
  • 4
9 Comments
 
LVL 84

Expert Comment

by:oBdA
ID: 11797110
You can remove the network neighborhood by activating the following policies:
User Configuration\Administrative Templates\Windows Components\Windows Explorer
* Remove options "Map network drive" and "Delete network drive"
* Don't show "Workgroup Contents" in Network Neighborhood
* Don't show "Entire Network" in Network Neighborhood
(Note that these are not the exact names, as I am not using an English version).

In addition, you can remove the complete "Places" bar with
User Configuration\Administrative Templates\Windows Components\Windows Explorer\Standard Dialog
* Remove places bar in standard dialogs
0
 
LVL 12

Expert Comment

by:gidds99
ID: 11799475
You can hide this via the registry:

http://www.winguides.com/registry/display.php/542/

This one may be relevant to your situation also:

http://www.winguides.com/registry/display.php/862/

Hope this helps.
0
 

Author Comment

by:GPEARL383
ID: 11833295
oBda - I tried to modify the GP settings like you said but the problems still exist.  Users can gain access when they are in an office program like word, open a file and then select the dropdown list.  Do you think these setting need to be modifyed in the MS OFFICE group policy templates?
0
Complete VMware vSphere® ESX(i) & Hyper-V Backup

Capture your entire system, including the host, with patented disk imaging integrated with VMware VADP / Microsoft VSS and RCT. RTOs is as low as 15 seconds with Acronis Active Restore™. You can enjoy unlimited P2V/V2V migrations from any source (even from a different hypervisor)

 
LVL 84

Expert Comment

by:oBdA
ID: 11834802
Which Office version is this? I have a custom policy template someplace with which you can set the Office places bar.
0
 

Author Comment

by:GPEARL383
ID: 11835641
office 2000
0
 

Author Comment

by:GPEARL383
ID: 11835693
This is whats happening: say a user is in excel2000, they go to file-open and then the file dialog box comes up.  When they go to the dropdown list to select what drive they want eg (the network drive, their H:\ drive which is home folder etc...) it will also come up with my network places etc.  Here it what is causing the problem...becasue if you select my network places certain users are able to see machines in domain including our servers.  From there if there are shared drives (that are not admin shares $) they are able to see shared drives and can gain access to info i dont want them to have....what do you think about this.  

Another thing i just relized is that this is just happening in excel...not other office programs....do you think this could be in the excel group policy template.  I have them installed and configured but maybee i missed something in the excel template???
0
 
LVL 84

Expert Comment

by:oBdA
ID: 11835985
Save this as PlacesBar.adm (or whatever.adm), import it into the GPO of your choice. Note that these are not "real" group policies, it's what Microsoft calls in changing terms "preferred settings", "branding", or "tattoing", as these changes are written to the registry outside of the \policies\ keys. This means that settings configured with this template will *not* simply "go away" (like group policies) if you set the policy to "not configured", these settings need to be explicitly undone, as back in NT4 and system policies.
If you see only the folders in the GP editor, but no policies to configure, you need to highlight the "Administrative Templates" key, then go to the "View" menu and uncheck "Show group policies only".
As usual: No warranties included, use it at your own risk, test it before you apply it in earnest:

====8<----[PlacesBar.adm]----
CLASS USER

CATEGORY "Additional Settings"

  CATEGORY "Microsoft Office 2000"

    CATEGORY "Places Bar"

      POLICY "Use small symbols"
        KEYNAME "Software\Microsoft\Office\9.0\Common\Open Find\Places"
        VALUENAME "ItemSize"
        VALUEON NUMERIC 0
        VALUEOFF NUMERIC 1
      END POLICY ; "Use small symbols"

      POLICY "Hide Desktop Icon"
        KEYNAME "Software\Microsoft\Office\9.0\Common\Open Find\Places\StandardPlaces\Desktop"
        VALUENAME "Show"
        VALUEON NUMERIC 0
        VALUEOFF DELETE
      END POLICY ; "Hide Desktop Icon"

      POLICY "Hide Favorites Icon"
        KEYNAME "Software\Microsoft\Office\9.0\Common\Open Find\Places\StandardPlaces\Favorites"
        VALUENAME "Show"
        VALUEON NUMERIC 0
        VALUEOFF DELETE
      END POLICY ; "Hide Favorites Icon"

      POLICY "Hide 'My Documents' Icon"
        KEYNAME "Software\Microsoft\Office\9.0\Common\Open Find\Places\StandardPlaces\MyDocuments"
        VALUENAME "Show"
        VALUEON NUMERIC 0
        VALUEOFF DELETE
      END POLICY ; "Hide 'My Documents' Icon"

      POLICY "Hide Network Icon"
        KEYNAME "Software\Microsoft\Office\9.0\Common\Open Find\Places\StandardPlaces\Publishing"
        VALUENAME "Show"
        VALUEON NUMERIC 0
        VALUEOFF DELETE
      END POLICY ; "Hide Network Icon"

      POLICY "Hide Recent Icon"
        KEYNAME "Software\Microsoft\Office\9.0\Common\Open Find\Places\StandardPlaces\Recent"
        VALUENAME "Show"
        VALUEON NUMERIC 0
        VALUEOFF DELETE
      END POLICY ; "Hide Recent Icon"

    END CATEGORY ; "Places Bar"

  END CATEGORY ; "Microsoft Office 2000"

END CATEGORY ; "Additional Settings"
====8<----[PlacesBar.adm]----
0
 
LVL 84

Accepted Solution

by:
oBdA earned 500 total points
ID: 11836127
If I set the three policies I mentioned before, the "Network Neighborhood" symbol still shows up in the drop down box, but it's completely empty, and you can't browse anymore (tested it in Word and Excel XP).
However, all those settings affect only the Explorer. If people can get access to a command prompt, they can still map drives. The best way to secure shares is to set the proper NTFS permissions; then they can access the share all they want, it won't help much ...
0
 

Author Comment

by:GPEARL383
ID: 11837719
Im going to test out what you gave me in my test envir.  But for now i agree that i am just going to set NTFS permissions and they wont be able to go anywhere...Thanks for input

GSP
0

Featured Post

Announcing the Most Valuable Experts of 2016

MVEs are more concerned with the satisfaction of those they help than with the considerable points they can earn. They are the types of people you feel privileged to call colleagues. Join us in honoring this amazing group of Experts.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

SHARE your personal details only on a NEED to basis. Take CHARGE and SECURE your IDENTITY. How do I then PROTECT myself and stay in charge of my own Personal details (and) - MY own WAY...
No security measures warrant 100% as a "silver bullet". The truth is we also cannot assume anything but a defensive and vigilance posture. Adopt no trust by default and reveal in assumption. Only assume anonymity or invisibility in the reverse. Safe…
Two types of users will appreciate AOMEI Backupper Pro: 1 - Those with PCIe drives (and haven't found cloning software that works on them). 2 - Those who want a fast clone of their boot drive (no re-boots needed) and it can clone your drive wh…
This video shows how to use Hyena, from SystemTools Software, to bulk import 100 user accounts from an external text file. View in 1080p for best video quality.

839 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question