Disabling Windows Explorer Browse Dialog Box

I want to restrict my users via GPO from using the browse window when you want to search for a file or directory.  Is there a GPO setting that will accomplish this?  Please let me know where I can find the setting.  Thanks!
Steve EckermanSystems AdministratorAsked:
Who is Participating?
 
Rich RumbleConnect With a Mentor Security SamuraiCommented:
I've never heard or seen that setting, and can't find it via search. If there are areas you don't what them to access I'd suggest using NTFS and or Share permissions to deny them the ability to see/access certain files/folders. Any authenticated user, even guests, can dump all of AD via a tool like ldifde, csvde, dsquery, dsget, net.exe or vbscript. These tools are from M$ and or built-in to all M$ OS's. Depending on their access they can't change much, but they can see it all. That doesn't apply to shares or files/folders, that access depends on what their accounts are authorized to do.
Again I'm not sure why you want the browse blocked from explorer, you do know that a 3rd party application would likely ignore the setting if it existed, and just using Adobe Reader the user could go to file->open and browse around still. As a fun fact, by default, anyone in the authenticated users group is allowed to join up to 10 PC's to the network.
-rich
0
 
Steve EckermanSystems AdministratorAuthor Commented:
I am running 2008 R2 edition.  I use GPO's to limit access to network drives and other components of our network.  I want to prevent users from being able to navigate the network via the browse window.  Is this possible?  Please advise.  Thanks.
0
 
Steve EckermanSystems AdministratorAuthor Commented:
Great Answer and Thanks!
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.