Solved

how to secure onedrive

Posted on 2014-12-16
18
254 Views
Last Modified: 2015-01-17
i use onedrive
is ther a way to secure this
currently if a network user browses to my pc via \\pcname\c$
they could access all my docs
and even take a copy of them onto their own pc
can i lock this down
i know i could disable unc network browsing but this stops other apps from function
how can i lock down one drive
0
Comment
Question by:dougdog
  • 8
  • 4
  • 3
  • +2
18 Comments
 
LVL 35

Expert Comment

by:Kimputer
ID: 40502945
\\pcname\c$ is reserved for administrative access. It means you are using the same admin accounts on all pc's ?
Just never use the admin account (only when needed of course) and have all users have their own username and password on USER level (NOT ADMIN!)
So start with changing all the admin accounts (to something only the admins should know) and then start to migrate all users to user accounts.
0
 

Author Comment

by:dougdog
ID: 40502965
is there no way to restrict just the one drive folder
or set a password
0
 
LVL 87

Expert Comment

by:rindi
ID: 40503033
As mentioned above, never use admin accounts to logon on to PC's by default. Always create standard accounts and only use those for day to day work. If you use admin accounts, and those are used all the time, you'll be wide open for viruses, malware, hackers etc. It is also easier to break things by mistake. This is one of the most important things to do when using a PC, besides having a good backup strategy.
0
 
LVL 34

Expert Comment

by:Seth Simmons
ID: 40503227
you refer to the UNC path on a local system though you added the tag of cloud computing and refer to microsoft one drive which is something different

seems your question isn't quite clear
0
 
LVL 69

Expert Comment

by:Merete
ID: 40504217
I use OneDrive with my windows 7 windows live email account and it requires a password to access through the Microsoft Account.
With two others here all using windows 7 as well and are admins on their systems they cannot access my OneDrive as they don't have my Microsoft Password.
I suggest you check how you access your OneDrive.
Microsoft account
How do I change my password?
http://windows.microsoft.com/en-au/windows-live/microsoft-account-help#microsoft-account=tab0
The security of your files in OneDrive
http://windows.microsoft.com/en-au/onedrive/security
Privacy in OneDrive
Manage who can view or edit your OneDrive files
http://www.microsoft.com/security/online-privacy/onedrive.aspx
0
 

Author Comment

by:dougdog
ID: 40504328
you are using one drive by logging directly into the cloud via a browser
you must not have downloaded the local one drive app which lets you use one drive like local storage
one drive is cloud computing hence the tag
what im trying to say here is
if you are using one drive and have opted to download the one drive app for windows it creates a one drive shortcut on your desktop
this allow you to access a local cached copy of your documents stored in one drive
any one with admin access or domain admin access can browse to your pc and access the one drive folder
the question is not around admin access I know all that
im talking about securing the one drive folder on the desktop
obviously in a large company their are going to be a number of users with domain admin access who could access my desktop
0
 
LVL 69

Expert Comment

by:Merete
ID: 40504353
Nope I don't use the Onedrive folder on my desktop or on my computer. Never installed it.
That is only necessary for syncing files. I just use the Onedrive online these are copies of my files and once I have sent shared the files I delete them.
Maybe I'm using a different method to you.
I can log in from a web browser
Let me show you how I-we  have it here
What I do is log in from windows live mail, I am logged in with WLM all the time with my ISP password and email address
WLMthen go to view my profile at this step I have to log onto Microsoft account.
Microsoft Sign inThen I see the boxes and open Outlook.com. or Onedrive etc
Or if I want to upload files to Onedrive I just open that.
Microsoft account
I take it this is completely different method to you?
What's your email client? dougdog
Is this at work?
I'd talk your administrator about this as you may not have the privileges?
0
 
LVL 87

Expert Comment

by:rindi
ID: 40504359
If you don't trust the admins of your company, you should not store any important data on your PC. If not only the admins know the admin accounts and passwords, something is wrong in your company and you should have your IT department reorganized.
0
 

Author Comment

by:dougdog
ID: 40504417
rindi in a company with 20000 employees there are going to be quite a few admins
this is nothing to do with what I asked
merete yes this is a possibility I suppose
but the app allow easy drag and drop facility
I use one drive as my primary storage for personal data
onedrive.JPG
0
Too many email signature changes to deal with?

Are you constantly being asked to update your organization's email signatures? Do they take up too much of your time? Wouldn't you love to be able to manage all signatures from one central location, easily design them and deploy them quickly to users. Well, you can!

 
LVL 69

Expert Comment

by:Merete
ID: 40504426
dougdog
No I don't have that OneDrive, I believe it is installed automatically in my programfiles?
No OneDriveMay I suggest to you that a 1-2 or 4 terrabyte USB drive station makes a marvellous storage place.
I have 4 of them
WD Buffalo USB drive station, never My Books etc.

On Amazon

Even usb flash drive 128gb
0
 

Author Comment

by:dougdog
ID: 40504430
its not cloud storage
it cant be accessed via smart phone via internet café via anywhere
don't have to worry about backups
0
 
LVL 69

Expert Comment

by:Merete
ID: 40504436
OneDrive I understand is not Cloud Storage.
OneDrive is part of Windows Live.
You could simply sign up for a Microsoft account that would be your own private outside of the work place and only you can access anywhere from a browser
public and private foldersOutlook.com + SkyDrive windows live
It is the same OneDrive your using.
We have around 15 gig free now but I'd rather keep it offline.
All the games I play with Steam is now fully online and even buying new games is just an electronic download.
Office 365 is cloud storage based.
0
 

Accepted Solution

by:
dougdog earned 0 total points
ID: 40544140
i found the solution myself
create a second partition ie a D drive
store the one drive fodler on this drive
set ntfs permissions on the complete drive that only allow myself permission
if anyone tries to unc to this drive they will get an access denied
simple
0
 
LVL 35

Expert Comment

by:Kimputer
ID: 40544150
if they still have access to \\pcname\c$, it still means everyone is admin. If I was on your network, you just implemented a nice "hide", but it doesn't mean it's not accessible (would take me just a few seconds). It's only logical, admin has access to everything.
You just awarded yourself the answer for "hiding" something, while your original question was to "lock it down".
0
 

Author Comment

by:dougdog
ID: 40544212
how would you access it then?
0
 
LVL 35

Expert Comment

by:Kimputer
ID: 40544280
As an admin, there are so many ways. The most obvious right now is \\pcname\d$.
0
 

Author Comment

by:dougdog
ID: 40544283
this will not work i tested it and you will get an access denied message actually
0
 

Author Closing Comment

by:dougdog
ID: 40554957
the others were not solutions
they did not understand what i was trying to do or what onedrive was
0

Featured Post

Do email signature updates give you a headache?

Do you feel like all of your time is spent managing email signatures? Too busy to visit every user’s desk to make updates? Want high-quality HTML signatures on all devices, including on mobiles and Macs? Then, let Exclaimer solve all your email signature problems today!

Join & Write a Comment

Password hashing is better than message digests or encryption, and you should be using it instead of message digests or encryption.  Find out why and how in this article, which supplements the original article on PHP Client Registration, Login, Logo…
If you're not part of the solution, you're part of the problem.   Tips on how to secure IoT devices, even the dumbest ones, so they can't be used as part of a DDoS botnet.  Use PRTG Network Monitor as one of the building blocks, to detect unusual…
This Micro Tutorial will show you how to maximize your wireless card to its maximum capability. This will be demonstrated using Intel(R) Centrino(R) Wireless-N 2230 wireless card on Windows 8 operating system.
The viewer will learn how to successfully download and install the SARDU utility on Windows 8, without downloading adware.

706 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

18 Experts available now in Live!

Get 1:1 Help Now