How do I keep users from viewing the network

Hello,

I manage a small LAN along that includes a Charter School.
The Charter school users connect to a server using thin clients. I have been able to hide certain things using group policy such as the ability to shut down the server, my computer and my network places.
Unfortunately, it seems that when in a word document if you choose the 'Save as' option it brings up a window where users can then navigate throughout the network.
Anyone know how to lock this down?

Thank you.
FlynnKeiltyAsked:
Who is Participating?
 
kuknoConnect With a Mentor Commented:
Flynn,

ah, O.K. So, why do you want to "hide" all the network shares. Just set file access rights for the users, so they will have just access to the areas they are allowed to.

Regards
Kurt
0
 
kuknoCommented:
Hi,

have a look at Microsoft SteadyState: http://www.microsoft.com/downloads/details.aspx?familyid=D077A52D-93E9-4B02-BD95-9D770CCDB431&displaylang=en

I'm not sure if this works for your thin clients (can you please specify?)..

Regards
Kurt
0
 
FlynnKeiltyAuthor Commented:
Kurt,
Thank you so much for your reply. I could have elaborated more in my original post.
The Thin clients the students use run a basic OS that allows them to connect using RDP to a server. Once on the server they use their login profile there as if they were on a desktop computer.
I've done alot of work in group policy so that they cannot do too many destructive things, such as shut down the server, which would kick everyone out. Or change important desktop settings. I had also removed 'My computer' and 'My network places' from the desktop and start menu because I do not want them going all over the server or our corporate network. Everything looks fine, the problems arise when you open up a word document and then choose 'Save as'. When you do this a new window pops up that allows you to pretty much go wherever and do whatever you want. I was hoping there was some way to also block this. What i may need to do is use deny privileges (read, list) and see if that works.
Thanks again for your suggestion.

Flynn
0
 
FlynnKeiltyAuthor Commented:
Thank you for your assistance.
0
 
FlynnKeiltyAuthor Commented:
I was hoping to be able to set one setting in group policy instead of denying rights to a group on each server. I will just deny rights to the whole disk instead of each individual share. Really, just time and ease of admin concerns. Thank you for confirming for me, I appreciate your time.

Flynn
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.