Office Bypasses Network Restrictions - Help Please

[gavtowns]

If I type the URL of part of our network into the standard explorer address bar (ie \\server\foldername) the network security stoips unauthorised users from going to that directory.

However if open an Office document (ie MS Word) and enter that same URL string directly into the File Name box it will open the directory and display all the files.

Anybody know how to disable this from happening.

Thanks in advance

 

[chipk]

What do you mean by network security? NTFS permissions? Share permissions?

 

[gavtowns]

Our server has various folders, one of which contains all the home folders (one for each user), permissions set only allow a user to view the contents of their own home folder.

eg \\servername\homefolders\

so a user George would have his home folder in

\\servername\homefolders\george

However if they type the URL of the homefolders into the File Name box in office they get to see everyones home folders and can then go into those home folders and read all the files

I'm sorry I am probably not explaining this too well, hope you know what I am meaning

Thanks

 

[chipk]

No, you're explaing it fine. I think you have a problem with your permissions - I would recheck both Share and NTFS permissions (the drive is NTFS, correct?). Either that or there is a serious bug in Office.

 

[gavtowns]

But the permissions work fine when the UNC is typed into a browser, it is only when they are entered into the file open dialogue box that they allow this browsing.

Yes it's NTFS and permissions do look fine and stop all other forms of unauthorise browsing.

So far it hasn't been a problem because normal users do not know the UNC path, I am just trying to bolt the door before the horse bolts

Thanks again

 

[chipk]

What are the Share and NTFS permissions, exactly? Can you post them? Just fudge the user names.