Any idea how I could use GPO in AD to restrict users from using the top buttons norally available in the Open and Save dialog boxes. Primarily I am concerned about the Up button that allows users to navigate up through a structure and potentially into the network system.
Tek-Tips is the largest IT community on the Internet today!
Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!
-
Congratulations strongm on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!
Open and Save Dialog Buttons
- Thread starter GazzaN
- Start date
bofhrevenge2
MIS
The best way to prevent this is to strategically place the shares that give them access at a lower area of the file structure, that way they can't use the up button to browse back up the file structure.
"Sometimes, a cigar is just a cigar." - Sigmund Freud
"Sometimes, a cigar is just a cigar." - Sigmund Freud
- Thread starter
- #3
Okay, that doesn't mean much (but thanks for the speedy reply!)
We are running DFS as well as individual home folder shares. It is the latter that seems to allow them to navigate back up. The structure is \\SERVER\DOC$\USERGROUP\%USERNAME% yet they can UP all the way past the server and see the network itself.
How would I restructure to avoid this?
We are rebuilding our network soon and so any advice, even radical, would be gratefully received.
We are running DFS as well as individual home folder shares. It is the latter that seems to allow them to navigate back up. The structure is \\SERVER\DOC$\USERGROUP\%USERNAME% yet they can UP all the way past the server and see the network itself.
How would I restructure to avoid this?
We are rebuilding our network soon and so any advice, even radical, would be gratefully received.
bofhrevenge2
MIS
Are you using UNC paths rather than mapped drives?
I'm not at a server at the mo so i can't look but i'm sure there is a way using GP to prevent users from browsing the computer near me list.
Take a look at this page and see if it helps.
"Sometimes, a cigar is just a cigar." - Sigmund Freud
I'm not at a server at the mo so i can't look but i'm sure there is a way using GP to prevent users from browsing the computer near me list.
Take a look at this page and see if it helps.
"Sometimes, a cigar is just a cigar." - Sigmund Freud
- Thread starter
- #5
There is a GPO under user that stops displaying Computers Near Me but that is within network neighbourhood and not, I believe , within dialog boxes (though I could be wrong). As with you I am not near our servers and so cannot check to see either the option or if it is set but I will tomorrow.
We use two maps, one created by the Account's home folder settings (the Z: drive) and one map pointing to the DFS share (the H: Drive).
We use two maps, one created by the Account's home folder settings (the Z: drive) and one map pointing to the DFS share (the H: Drive).
bofhrevenge2
MIS
I think you will find the settings under User Configuration - Admin Templates - Windows Components - Windows Explorer.
"Sometimes, a cigar is just a cigar." - Sigmund Freud
"Sometimes, a cigar is just a cigar." - Sigmund Freud
bofhrevenge2
MIS
I think those dialog boxes just display the contents of the network neighbourhood.
"Sometimes, a cigar is just a cigar." - Sigmund Freud
"Sometimes, a cigar is just a cigar." - Sigmund Freud
- Thread starter
- #8
bofhrevenge2
MIS
Yes properly MS certified apps should be affected by group policy and will not display the network or let users browse the network.
"Sometimes, a cigar is just a cigar." - Sigmund Freud
"Sometimes, a cigar is just a cigar." - Sigmund Freud
- Status
Similar threads
- Locked
- Question
