?
Solved

Remote Desktop User are able "see" and access Network Computers

Posted on 2013-05-24
5
Medium Priority
?
280 Views
Last Modified: 2013-06-03
Hi all.

I was checking our RDS install today, and noticed i was able to see, browse and delete files on the shared folders on windows explorer.

Please check the attached screen shot.

How to prevent this?
ee.JPG
0
Comment
Question by:manolocruz
  • 3
5 Comments
 
LVL 14

Expert Comment

by:Justin Yeung
ID: 39195311
what do you want to prevent?

preventing user from browsing the network? or you want to denied mapping network drive?
0
 

Author Comment

by:manolocruz
ID: 39195423
They are able to browse to any user folder, thats what i dont want, i found a solution by adding a DWORD key into regedit, but i am sure that this is not the best way of doing this.

I already enabled some GPO's, preventing this but looks like they are not working.
0
 

Author Comment

by:manolocruz
ID: 39195427
finishing, i want to prevent them BROWSING THE NETWORK
0
 
LVL 27

Accepted Solution

by:
davorin earned 1500 total points
ID: 39195795
The accepted answer in this post reflects my opinion:
http://social.technet.microsoft.com/Forums/en-US/winserverGP/thread/3bc246ab-32ee-40bf-b9e5-d6dd3f1516e8

I would deny access (permissions) to (at) network resources for remote desktop users except to the ones they need. I guess they also need some network resources, so putting TS in separate network is not an option.
0
 

Author Closing Comment

by:manolocruz
ID: 39216899
Thanks very much, leaded me to the solution.
0

Featured Post

New feature and membership benefit!

New feature! Upgrade and increase expert visibility of your issues with Priority Questions.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

After seeing many questions for JRNL_WRAP_ERROR for replication failure, I thought it would be useful to write this article.
High user turnover can cause old/redundant user data to consume valuable space. UserResourceCleanup was developed to address this by automatically deleting user folders when the user account is deleted.
This video shows how to use Hyena, from SystemTools Software, to bulk import 100 user accounts from an external text file. View in 1080p for best video quality.
Attackers love to prey on accounts that have privileges. Reducing privileged accounts and protecting privileged accounts therefore is paramount. Users, groups, and service accounts need to be protected to help protect the entire Active Directory …
Suggested Courses

850 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question