Solved

Disable "New>Shortcut" using Group Policy

Posted on 2010-11-30
6
1,078 Views
Last Modified: 2012-08-13
Hello, I have tired looking on google for information on this but with no success.

I want to be able to lock down certain user accounts in Group Policy to disable the ability of creating short cuts from the file menu and by right clicking. We have important hard drives hidden, however to get past this users are creating short cuts to the c: drive etc.

So ideally I was looking for a solution using group policy to disable the ability of creating new shortcuts. Any ideas?
0
Comment
Question by:alumwell
  • 3
  • 2
6 Comments
 
LVL 12

Accepted Solution

by:
udayakumarlm earned 250 total points
Comment Utility
any one can access the files even if you block creation of the shortcut if they have access. one way is to remove the groups from the drive's security list(using the security tab of the properties) this will help you to implement all kinds of controls you want to impose for the group.
0
 

Author Comment

by:alumwell
Comment Utility
I still dont mind them viewing the drive, they cant alter anything, however they can see network drives which store login scripts and security so I wish them not been able to view files like that.
0
 
LVL 12

Expert Comment

by:udayakumarlm
Comment Utility
if the drive is local (C:,D: etc)on the machine you can change the security settings of the drive to make the files not accssible, they can view the drive but can not browse the files.
if the drive is a network share(\\targetmachine\C$" mapped as drive then it is difficult to stop them from viewing the file, once you map the drive you will not be able to set the security settings for the same
0
Free Gift Card with Acronis Backup Purchase!

Backup any data in any location: local and remote systems, physical and virtual servers, private and public clouds, Macs and PCs, tablets and mobile devices, & more! For limited time only, buy any Acronis backup products and get a FREE Amazon/Best Buy gift card worth up to $200!

 

Author Comment

by:alumwell
Comment Utility
Its not a local drive its a network drive. However it is not mapped. The login script is called which is stored on the network drive. If there is an error on the login script it will display a message along with the location of the file. Now most users wont think another thing of it, however there are some users of our network who go out of their way to hack and break into stuff. I would like to prevent this from happening
0
 
LVL 1

Assisted Solution

by:dwarner8
dwarner8 earned 250 total points
Comment Utility
On your network drive. Make sure your have NTFS permissions and set the security to allow users only the right to read. Right click on the drives properties, go to the security tab, and make sure your users can read only.
0
 

Author Closing Comment

by:alumwell
Comment Utility
It has fixed the current problem but not prevented users from creating short cuts
0

Featured Post

Backup Your Microsoft Windows Server®

Backup all your Microsoft Windows Server – on-premises, in remote locations, in private and hybrid clouds. Your entire Windows Server will be backed up in one easy step with patented, block-level disk imaging. We achieve RTOs (recovery time objectives) as low as 15 seconds.

Join & Write a Comment

Big data transfers via information superhighways require special attention and protection. Learn more about the IT-regulations of the country where your server is located. Analyze cloud providers and their encryption systems for safe data transit. S…
Never store passwords in plain text or just their hash: it seems a no-brainier, but there are still plenty of people doing that. I present the why and how on this subject, offering my own real life solution that you can implement right away, bringin…
This tutorial will show how to configure a single USB drive with a separate folder for each day of the week. This will allow each of the backups to be kept separate preventing the previous day’s backup from being overwritten. The USB drive must be s…
This tutorial will walk an individual through setting the global and backup job media overwrite and protection periods in Backup Exec 2012. Log onto the Backup Exec Central Administration Server. Examine the services. If all or most of them are stop…

763 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

10 Experts available now in Live!

Get 1:1 Help Now