Solved

Windows 2003 Server

Posted on 2008-10-26
9
206 Views
Last Modified: 2010-04-19
When I map a network drive on a computer I see all the computer, server, and shared folder names so my question is how do I hide them so that when a user maps a drive they don't see and have access to all the drives that come up. This is a security risk and I want to correct it ASAP.
0
Comment
Question by:csciarro
  • 4
  • 2
  • 2
  • +1
9 Comments
 
LVL 4

Expert Comment

by:ltxda
Comment Utility
If you share a resource you don't really hide it but you restrict access to it using either group or user permissions.  If a user tries to access a resource that they shouldn't have rights to then they are denied access.  Play around with the Share and NTFS persmissions for this result.
0
 

Expert Comment

by:Macky4546
Comment Utility
yes when it comes to sharing in server 2003 it all depends on how your network is setup. The best way to implement anything like this is to have it by group and user sharing. So someone can see the folder but the restrictions wont allow them to view the contents. You can also mess around with adding a $ at the end of a share name, that will display that particular share for admins only.
0
 

Author Comment

by:csciarro
Comment Utility
Ok. Thanks. Can I also add a $ to the folders with the folder to hide them as well? Also, the computer and server names are also showing up so how can I setup the server that they will not appear since nothing could be mapped to the computer names?
0
 
LVL 4

Expert Comment

by:ltxda
Comment Utility
Yes you could do that but $ are reserved for administrative shares and you might have an issue with users but it won't hurt to try it in your environment and see what happens.  Try it with one directory and see if it works for you before you do them all.
0
Maximize Your Threat Intelligence Reporting

Reporting is one of the most important and least talked about aspects of a world-class threat intelligence program. Here’s how to do it right.

 

Author Comment

by:csciarro
Comment Utility
So you would suggest putting a $ to hide the computer and server names so they don't show up when I try to map a drive?
0
 
LVL 4

Expert Comment

by:ltxda
Comment Utility
No I wouldn't. I would just restrict it via the permissions.  That's why I mentioned that you might have issues by doing that.
0
 
LVL 4

Accepted Solution

by:
ltxda earned 250 total points
Comment Utility
0
 
LVL 38

Expert Comment

by:ChiefIT
Comment Utility
There is a program called Access based Enumeration that does all of this for you. Only the shares they have permissions to will be viewable to them.

This program is available from SP1 and after for 2003 server:
http://technet.microsoft.com/en-us/library/cc784710.aspx
0
 

Expert Comment

by:Macky4546
Comment Utility
ill explain the $ is the share name.
When you add the $ to the end of the share name it is going to hide that share on the network.
In order to access the folder you need to have admin rights and connect directly to it.
IE. \\server\share$

That will take you directly to that shared folder that is hidden on the network, but you HAVE to have admin rights.
0

Featured Post

Top 6 Sources for Identifying Threat Actor TTPs

Understanding your enemy is essential. These six sources will help you identify the most popular threat actor tactics, techniques, and procedures (TTPs).

Join & Write a Comment

Numerous times I have been asked this questions that what is it that makes my machine log on so slow, there have been cases where computers took 23 minute exactly after taking password and getting to the desktop. Interesting thing was the fact th…
Learn about cloud computing and its benefits for small business owners.
It is a freely distributed piece of software for such tasks as photo retouching, image composition and image authoring. It works on many operating systems, in many languages.
This tutorial demonstrates a quick way of adding group price to multiple Magento products.

772 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

10 Experts available now in Live!

Get 1:1 Help Now