Solved

Remote Desktop User are able "see" and access Network Computers

Posted on 2013-05-24
5
271 Views
Last Modified: 2013-06-03
Hi all.

I was checking our RDS install today, and noticed i was able to see, browse and delete files on the shared folders on windows explorer.

Please check the attached screen shot.

How to prevent this?
ee.JPG
0
Comment
Question by:manolocruz
  • 3
5 Comments
 
LVL 14

Expert Comment

by:Justin Yeung
Comment Utility
what do you want to prevent?

preventing user from browsing the network? or you want to denied mapping network drive?
0
 

Author Comment

by:manolocruz
Comment Utility
They are able to browse to any user folder, thats what i dont want, i found a solution by adding a DWORD key into regedit, but i am sure that this is not the best way of doing this.

I already enabled some GPO's, preventing this but looks like they are not working.
0
 

Author Comment

by:manolocruz
Comment Utility
finishing, i want to prevent them BROWSING THE NETWORK
0
 
LVL 27

Accepted Solution

by:
davorin earned 500 total points
Comment Utility
The accepted answer in this post reflects my opinion:
http://social.technet.microsoft.com/Forums/en-US/winserverGP/thread/3bc246ab-32ee-40bf-b9e5-d6dd3f1516e8

I would deny access (permissions) to (at) network resources for remote desktop users except to the ones they need. I guess they also need some network resources, so putting TS in separate network is not an option.
0
 

Author Closing Comment

by:manolocruz
Comment Utility
Thanks very much, leaded me to the solution.
0

Featured Post

How to run any project with ease

Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
- Combine task lists, docs, spreadsheets, and chat in one
- View and edit from mobile/offline
- Cut down on emails

Join & Write a Comment

Resolve DNS query failed errors for Exchange
In this article, we will see the basic design consideration while designing a Multi-tenant web application in a simple manner. Though, many frameworks are available in the market to develop a multi - tenant application, but do they provide data, cod…
This tutorial will walk an individual through the steps necessary to configure their installation of BackupExec 2012 to use network shared disk space. Verify that the path to the shared storage is valid and that data can be written to that location:…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…

743 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

15 Experts available now in Live!

Get 1:1 Help Now