Go Premium for a chance to win a PS4. Enter to Win

x
?
Solved

Disable "New>Shortcut" using Group Policy

Posted on 2010-11-30
6
Medium Priority
?
1,088 Views
Last Modified: 2012-08-13
Hello, I have tired looking on google for information on this but with no success.

I want to be able to lock down certain user accounts in Group Policy to disable the ability of creating short cuts from the file menu and by right clicking. We have important hard drives hidden, however to get past this users are creating short cuts to the c: drive etc.

So ideally I was looking for a solution using group policy to disable the ability of creating new shortcuts. Any ideas?
0
Comment
Question by:alumwell
  • 3
  • 2
6 Comments
 
LVL 12

Accepted Solution

by:
udaya kumar laligondla earned 750 total points
ID: 34237002
any one can access the files even if you block creation of the shortcut if they have access. one way is to remove the groups from the drive's security list(using the security tab of the properties) this will help you to implement all kinds of controls you want to impose for the group.
0
 

Author Comment

by:alumwell
ID: 34237596
I still dont mind them viewing the drive, they cant alter anything, however they can see network drives which store login scripts and security so I wish them not been able to view files like that.
0
 
LVL 12

Expert Comment

by:udaya kumar laligondla
ID: 34237720
if the drive is local (C:,D: etc)on the machine you can change the security settings of the drive to make the files not accssible, they can view the drive but can not browse the files.
if the drive is a network share(\\targetmachine\C$" mapped as drive then it is difficult to stop them from viewing the file, once you map the drive you will not be able to set the security settings for the same
0
Ready for your healthcare security check-up?

In the past few years, healthcare organizations have become a prime target for advanced attacks. Does your organization have what it needs to defend itself? Schedule your healthcare security check-up today and download our free Healthcare Security Resource Kit today!

 

Author Comment

by:alumwell
ID: 34237905
Its not a local drive its a network drive. However it is not mapped. The login script is called which is stored on the network drive. If there is an error on the login script it will display a message along with the location of the file. Now most users wont think another thing of it, however there are some users of our network who go out of their way to hack and break into stuff. I would like to prevent this from happening
0
 
LVL 1

Assisted Solution

by:dwarner8
dwarner8 earned 750 total points
ID: 34239222
On your network drive. Make sure your have NTFS permissions and set the security to allow users only the right to read. Right click on the drives properties, go to the security tab, and make sure your users can read only.
0
 

Author Closing Comment

by:alumwell
ID: 34266867
It has fixed the current problem but not prevented users from creating short cuts
0

Featured Post

Creating Active Directory Users from a Text File

If your organization has a need to mass-create AD user accounts, watch this video to see how its done without the need for scripting or other unnecessary complexities.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Considering today’s continual security threats, which affect Information technology networks and systems worldwide, it is very important to practice basic security awareness. A normal system user can secure himself or herself by following these simp…
The Internet has made sending and receiving information online a breeze. But there is also the threat of unauthorized viewing, data tampering, and phoney messages. Surprisingly, a lot of business owners do not fully understand how to use security t…
This tutorial will walk an individual through the steps necessary to install and configure the Windows Server Backup Utility. Directly connect an external storage device such as a USB drive, or CD\DVD burner: If the device is a USB drive, ensure i…
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…

916 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question