Solved

Disabling Windows Explorer Browse Dialog Box

Posted on 2013-01-17
3
405 Views
Last Modified: 2013-01-18
I want to restrict my users via GPO from using the browse window when you want to search for a file or directory.  Is there a GPO setting that will accomplish this?  Please let me know where I can find the setting.  Thanks!
0
Comment
Question by:submarinerssbn731
  • 2
3 Comments
 

Author Comment

by:submarinerssbn731
ID: 38788755
I am running 2008 R2 edition.  I use GPO's to limit access to network drives and other components of our network.  I want to prevent users from being able to navigate the network via the browse window.  Is this possible?  Please advise.  Thanks.
0
 
LVL 38

Accepted Solution

by:
Rich Rumble earned 500 total points
ID: 38792643
I've never heard or seen that setting, and can't find it via search. If there are areas you don't what them to access I'd suggest using NTFS and or Share permissions to deny them the ability to see/access certain files/folders. Any authenticated user, even guests, can dump all of AD via a tool like ldifde, csvde, dsquery, dsget, net.exe or vbscript. These tools are from M$ and or built-in to all M$ OS's. Depending on their access they can't change much, but they can see it all. That doesn't apply to shares or files/folders, that access depends on what their accounts are authorized to do.
Again I'm not sure why you want the browse blocked from explorer, you do know that a 3rd party application would likely ignore the setting if it existed, and just using Adobe Reader the user could go to file->open and browse around still. As a fun fact, by default, anyone in the authenticated users group is allowed to join up to 10 PC's to the network.
-rich
0
 

Author Closing Comment

by:submarinerssbn731
ID: 38792991
Great Answer and Thanks!
0

Featured Post

How to run any project with ease

Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
- Combine task lists, docs, spreadsheets, and chat in one
- View and edit from mobile/offline
- Cut down on emails

Join & Write a Comment

I have been working as System Administrators since 2003. I recently started working as a FreeLancer and was amazed to find out that very few people are taking full advantage of their Windows Server Machines. Microsoft Windows Server comes with so…
Possible fixes for Windows 7 and Windows Server 2008 updating problem. Solutions mentioned are from Microsoft themselves. I started a case with them from our Microsoft Silver Partner option to open a case and get direct support from Microsoft. If s…
This tutorial will walk an individual through locating and launching the BEUtility application to properly change the service account username and\or password in situation where it may be necessary or where the password has been inadvertently change…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…

760 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

19 Experts available now in Live!

Get 1:1 Help Now