Solved

Disabling Windows Explorer Browse Dialog Box

Posted on 2013-01-17
3
408 Views
Last Modified: 2013-01-18
I want to restrict my users via GPO from using the browse window when you want to search for a file or directory.  Is there a GPO setting that will accomplish this?  Please let me know where I can find the setting.  Thanks!
0
Comment
Question by:submarinerssbn731
  • 2
3 Comments
 

Author Comment

by:submarinerssbn731
ID: 38788755
I am running 2008 R2 edition.  I use GPO's to limit access to network drives and other components of our network.  I want to prevent users from being able to navigate the network via the browse window.  Is this possible?  Please advise.  Thanks.
0
 
LVL 38

Accepted Solution

by:
Rich Rumble earned 500 total points
ID: 38792643
I've never heard or seen that setting, and can't find it via search. If there are areas you don't what them to access I'd suggest using NTFS and or Share permissions to deny them the ability to see/access certain files/folders. Any authenticated user, even guests, can dump all of AD via a tool like ldifde, csvde, dsquery, dsget, net.exe or vbscript. These tools are from M$ and or built-in to all M$ OS's. Depending on their access they can't change much, but they can see it all. That doesn't apply to shares or files/folders, that access depends on what their accounts are authorized to do.
Again I'm not sure why you want the browse blocked from explorer, you do know that a 3rd party application would likely ignore the setting if it existed, and just using Adobe Reader the user could go to file->open and browse around still. As a fun fact, by default, anyone in the authenticated users group is allowed to join up to 10 PC's to the network.
-rich
0
 

Author Closing Comment

by:submarinerssbn731
ID: 38792991
Great Answer and Thanks!
0

Featured Post

Is Your AD Toolbox Looking More Like a Toybox?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Normally after a failure of Domain Controller, when promoting new DC the DC is renamed, we will discuss the options in Dcpromo to re-create the DC with the same name. Scenario: You are a small IT shop with two Domain Controllers (Domain Contr…
The recent Microsoft changes on update philosophy for Windows pre-10 and their impact on existing WSUS implementations.
This tutorial will walk an individual through locating and launching the BEUtility application to properly change the service account username and\or password in situation where it may be necessary or where the password has been inadvertently change…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …

860 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question