Disable browsing the network

[jfrasier]

I have a Win2K professional workstation for the public in a library. The user is logging into the local computer, but also has a domain login in order to use some shared folders on an NT server and networked printers.

I am using local group policy to secure the workstation and have been successful in disabling the ability for them to type \\servername or c:\ in the IE addressbar or using Exporer to do this. However we also have other applications such as Word and WordPerfect and in Word, for example, they can browse c:\ or the network by typing in the server name and then going up the hierarchy to our domain name, etc.

How can I disable this?

Jane Frasier

 

[ShackDaddy]

Jane, I don't think this can be disabled, but what you surely want to do is set restrictive permissions almost everywhere else on the server besides the proper directories. They will always be able to navigate up the tree when using the SaveAs, but if they have no read, write, or even list access, it shouldn't do any harm. Perhaps have the kiosk log on with a local user account and not a domain one, and then all the 'Everyone' group access to the directories that are intended to be shared and restrict the rest to 'Domain Users' or the like.