?
Solved

Remote Desktop User are able "see" and access Network Computers

Posted on 2013-05-24
5
Medium Priority
?
277 Views
Last Modified: 2013-06-03
Hi all.

I was checking our RDS install today, and noticed i was able to see, browse and delete files on the shared folders on windows explorer.

Please check the attached screen shot.

How to prevent this?
ee.JPG
0
Comment
Question by:manolocruz
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
5 Comments
 
LVL 14

Expert Comment

by:Justin Yeung
ID: 39195311
what do you want to prevent?

preventing user from browsing the network? or you want to denied mapping network drive?
0
 

Author Comment

by:manolocruz
ID: 39195423
They are able to browse to any user folder, thats what i dont want, i found a solution by adding a DWORD key into regedit, but i am sure that this is not the best way of doing this.

I already enabled some GPO's, preventing this but looks like they are not working.
0
 

Author Comment

by:manolocruz
ID: 39195427
finishing, i want to prevent them BROWSING THE NETWORK
0
 
LVL 27

Accepted Solution

by:
davorin earned 1500 total points
ID: 39195795
The accepted answer in this post reflects my opinion:
http://social.technet.microsoft.com/Forums/en-US/winserverGP/thread/3bc246ab-32ee-40bf-b9e5-d6dd3f1516e8

I would deny access (permissions) to (at) network resources for remote desktop users except to the ones they need. I guess they also need some network resources, so putting TS in separate network is not an option.
0
 

Author Closing Comment

by:manolocruz
ID: 39216899
Thanks very much, leaded me to the solution.
0

Featured Post

Are your AD admin tools letting you down?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

A hard and fast method for reducing Active Directory Administrators members.
Group policies can be applied selectively to specific devices with the help of groups. Utilising this, it is possible to phase-in group policies, over a period of time, by randomly adding non-members user or computers at a set interval, to a group f…
This tutorial will walk an individual through configuring a drive on a Windows Server 2008 to perform shadow copies in order to quickly recover deleted files and folders. Click on Start and then select Computer to view the available drives on the se…
Are you ready to implement Active Directory best practices without reading 300+ pages? You're in luck. In this webinar hosted by Skyport Systems, you gain insight into Microsoft's latest comprehensive guide, with tips on the best and easiest way…
Suggested Courses
Course of the Month10 days, 8 hours left to enroll

764 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question