Solved

How do I keep users from viewing the network

Posted on 2008-10-06
5
168 Views
Last Modified: 2013-12-04
Hello,

I manage a small LAN along that includes a Charter School.
The Charter school users connect to a server using thin clients. I have been able to hide certain things using group policy such as the ability to shut down the server, my computer and my network places.
Unfortunately, it seems that when in a word document if you choose the 'Save as' option it brings up a window where users can then navigate throughout the network.
Anyone know how to lock this down?

Thank you.
0
Comment
Question by:FlynnKeilty
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
5 Comments
 
LVL 10

Expert Comment

by:kukno
ID: 22653595
Hi,

have a look at Microsoft SteadyState: http://www.microsoft.com/downloads/details.aspx?familyid=D077A52D-93E9-4B02-BD95-9D770CCDB431&displaylang=en

I'm not sure if this works for your thin clients (can you please specify?)..

Regards
Kurt
0
 

Author Comment

by:FlynnKeilty
ID: 22663078
Kurt,
Thank you so much for your reply. I could have elaborated more in my original post.
The Thin clients the students use run a basic OS that allows them to connect using RDP to a server. Once on the server they use their login profile there as if they were on a desktop computer.
I've done alot of work in group policy so that they cannot do too many destructive things, such as shut down the server, which would kick everyone out. Or change important desktop settings. I had also removed 'My computer' and 'My network places' from the desktop and start menu because I do not want them going all over the server or our corporate network. Everything looks fine, the problems arise when you open up a word document and then choose 'Save as'. When you do this a new window pops up that allows you to pretty much go wherever and do whatever you want. I was hoping there was some way to also block this. What i may need to do is use deny privileges (read, list) and see if that works.
Thanks again for your suggestion.

Flynn
0
 
LVL 10

Accepted Solution

by:
kukno earned 500 total points
ID: 22663179
Flynn,

ah, O.K. So, why do you want to "hide" all the network shares. Just set file access rights for the users, so they will have just access to the areas they are allowed to.

Regards
Kurt
0
 

Author Closing Comment

by:FlynnKeilty
ID: 31503576
Thank you for your assistance.
0
 

Author Comment

by:FlynnKeilty
ID: 22712441
I was hoping to be able to set one setting in group policy instead of denying rights to a group on each server. I will just deny rights to the whole disk instead of each individual share. Really, just time and ease of admin concerns. Thank you for confirming for me, I appreciate your time.

Flynn
0

Featured Post

The Eight Noble Truths of Backup and Recovery

How can IT departments tackle the challenges of a Big Data world? This white paper provides a roadmap to success and helps companies ensure that all their data is safe and secure, no matter if it resides on-premise with physical or virtual machines or in the cloud.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Security measures require Windows be logged in using Standard User login (not Administrator).  Yet, sometimes an application has to be run “As Administrator” from a Standard User login.  This paper describes how to create a shortcut icon to launch a…
Recently, I read that Microsoft has analysed statistics for their security intelligence report. It revealed: still, the clear majority of windows users do their daily work as administrator. An administrative account is a burden, security-wise. My ar…
I've attached the XLSM Excel spreadsheet I used in the video and also text files containing the macros used below. https://filedb.experts-exchange.com/incoming/2017/03_w12/1151775/Permutations.txt https://filedb.experts-exchange.com/incoming/201…
Exchange organizations may use the Journaling Agent of the Transport Service to archive messages going through Exchange. However, if the Transport Service is integrated with some email content management application (such as an antispam), the admini…

726 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question