?
Solved

Disabling Windows Explorer Browse Dialog Box

Posted on 2013-01-17
3
Medium Priority
?
411 Views
Last Modified: 2013-01-18
I want to restrict my users via GPO from using the browse window when you want to search for a file or directory.  Is there a GPO setting that will accomplish this?  Please let me know where I can find the setting.  Thanks!
0
Comment
Question by:submarinerssbn731
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 

Author Comment

by:submarinerssbn731
ID: 38788755
I am running 2008 R2 edition.  I use GPO's to limit access to network drives and other components of our network.  I want to prevent users from being able to navigate the network via the browse window.  Is this possible?  Please advise.  Thanks.
0
 
LVL 38

Accepted Solution

by:
Rich Rumble earned 2000 total points
ID: 38792643
I've never heard or seen that setting, and can't find it via search. If there are areas you don't what them to access I'd suggest using NTFS and or Share permissions to deny them the ability to see/access certain files/folders. Any authenticated user, even guests, can dump all of AD via a tool like ldifde, csvde, dsquery, dsget, net.exe or vbscript. These tools are from M$ and or built-in to all M$ OS's. Depending on their access they can't change much, but they can see it all. That doesn't apply to shares or files/folders, that access depends on what their accounts are authorized to do.
Again I'm not sure why you want the browse blocked from explorer, you do know that a 3rd party application would likely ignore the setting if it existed, and just using Adobe Reader the user could go to file->open and browse around still. As a fun fact, by default, anyone in the authenticated users group is allowed to join up to 10 PC's to the network.
-rich
0
 

Author Closing Comment

by:submarinerssbn731
ID: 38792991
Great Answer and Thanks!
0

Featured Post

Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Redirected folders in a windows domain can be quite useful for a number of reasons, one of them being that with redirected application data, you can give users more seamless experience when logging into different workstations.  For example, if a use…
For anyone that has accidentally used newSID with Server 2008 R2 (like I did) and hasn't been able to get the server running again because you were unlucky (as I was) and had no backups - I was able to get things working by doing a Registry Hive rec…
This tutorial will walk an individual through the steps necessary to configure their installation of BackupExec 2012 to use network shared disk space. Verify that the path to the shared storage is valid and that data can be written to that location:…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
Suggested Courses

765 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question