Folder Redirect question

Posted on 2004-08-27
Last Modified: 2010-04-11
Running Win2k3 - winxp clients

I currently have my clients Start Menu folder redirected through GPO to \\server\classrooms\roomnumber\folderredirects\start menu  (don't ask why, its a long story).

The problem is the users can double-click on "Programs" in the Start Menu to get to the above share and then back out until they can see all the directories I don't want them to see on the way.  How can I keep them from being able to see anything other than the redirected start menu?
Question by:baal32
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions

Author Comment

ID: 11914803
BTW - is this the correct area for this question?  I considered winxp in the OS section but that seemed more local policy oriented...
LVL 34

Expert Comment

ID: 11914864
You can't, as far as I know. Windoze file "security" isn't granular or flexible enough to block users from seeing things that they don't have access to. You'd need NetWare for that.

Expert Comment

ID: 11915173
with GPO, also... you can hide everything and even local resources. Let me search for the exact entry. I think it`s explorer option...
Create the perfect environment for any meeting

You might have a modern environment with all sorts of high-tech equipment, but what makes it worthwhile is how you seamlessly bring together the presentation with audio, video and lighting. The ATEN Control System provides integrated control and system automation.

LVL 34

Expert Comment

ID: 11915319
Fine, it modifies Explorer. How about the DOS command-line window? What if someone doesn't use Explorer to browse the environment?
LVL 10

Expert Comment

ID: 11915502
all you have to do is remove the permissions on the parent folders that you do not want clients to access.   Go to the server that contains the share folder.  RIght click on the folder, go to security tab.  Remove 'Everybody' and any other name that may give access to your clients.

Accepted Solution

MatthewWilliams earned 250 total points
ID: 11916435
Why not share the folderredirects as fold_rm123$ and redirect their startmenu to \\server\fold_rm123$ That way they don't have anything to back out to and all the shares are hidden.

Expert Comment

ID: 11916930
\server\classrooms\roomnumber\folderredirects remove read permissions from this folder.  Another way would do what MatthewWilliams said.  Share out your start menu folder and redirect to there.  Now they can't back out at all.

Expert Comment

ID: 11917521
>>>How can I keep them from being able to SEE anything other than the redirected start menu?

if it is explicit to see, you can only hide by using GPO, to hide any folder, local HD, or anything on the net. If you don´t even want them to access through command line, you can block the access to cmd.exe or command line. That´s not a problem. It depends exactly on your needs. But with GPO you can restrict them as much as you need, this is not a tool vs hackers.
LVL 34

Expert Comment

ID: 12594298
*shrug* Whatever

Featured Post

Microsoft Certification Exam 74-409

Veeam® is happy to provide the Microsoft community with a study guide prepared by MVP and MCT, Orin Thomas. This guide will take you through each of the exam objectives, helping you to prepare for and pass the examination.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
AD Design Best Practices 6 61
VMware:  Virtual switches and multiple NICs 9 123
autocad mechanical 2014 installation issue 5 65
Network latency question 9 76
When you try to share a printer , you may receive one of the following error messages. Error message when you use the Add Printer Wizard to share a printer: Windows could not share your printer. Operation could not be completed (Error 0x000006…
I had an issue with InstallShield not being able to use Computer Browser service on Windows Server 2012. Here is the solution I found.
After creating this article (, I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.

738 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question