Prevent user to make shortcut to C: (security issue)

[morten44]

Hi We are running Win2003 Server and Terminal Service.
We use GPO to lockdown as much as possible for student not to hack the system.

There is one thing we have not been able to control and that is to prevent users from making shortcut.
As long as they get access to "make shortcut", then can type "C:\" and that shortcut will work. It will not work if they type C:\ in Windows Explorer as we have set this is GPO.

Question:
does the "create shortcut wizard" have an exe file or any other physical file where I can set file premission on so student can not run but teachers can?

If not, is there another way to remove it from the "context menu".

I have searched hight and low. Only found others with same problem, but no solution.

Help!!!!

Thanks for your time

Regards
Morten

 

[TheLad]

Does your GPO restrict access to the C: from Explorer?

http://support.microsoft.com/kb/231289

Doing this, any shortcut created will give an Access Denied message when they try to access the drive

--------------------------------------
"Insert funny comment in here!"
--------------------------------------

 

[morten44]

Hi
Thanks for your time

Yes we do use GPO and the users does not see C in My Computer.
They can not write C: in Windows Explorer

but
they can create shortcut, type C:\ and that shortcut will work. They can not browse to the C drive but type it.

Not sure how to prevent this

Kind Regards
Morten

 

[TechyMcSe2k]

You need to set, in the GPO:
Userconfig/admintemplates/windows components/Windows Explorer
Remove Windows Explorer's default context menu
AND
Remove File menu from windows Explorer
and I suggest,
Hide these specific drives in My Computer
and
Prevent access to these fdrives in My Computer (I think you already have this one)

Also remove access to CMD prompt and registry editing tools.

________________________________________
Achieving a perception of high intelligence level can only be limited by your manipulation skills of the Google algorithm!