+ Post New Thread
Results 1 to 7 of 7
Windows 7 Thread, Downloads Folder - Allowing access to other users documents in Technical; Hey all bit of a strange one this, basically students have figured out that they can access other students documents ...
  1. #1

    Join Date
    Oct 2012
    Posts
    58
    Thank Post
    7
    Thanked 5 Times in 4 Posts
    Rep Power
    4

    Downloads Folder - Allowing access to other users documents

    Hey all bit of a strange one this, basically students have figured out that they can access other students documents and edit them !!!

    The Method:
    Open Computer
    Click on downloads in the navigation Pane
    The full server path comes up in the location bar ( \\server\student\Year\username\downloads\)
    They can then click on the year group and are then able to access and edit anything.


    This is extremely worrying, despite file security not allowing them access, for example they cannot enter the location manually > denied.

    The only reason I have found this to work is down to a security group which allows a handful of staff to modify students work(A SLT Idea). If I remove this security group form their share it no longer works.

    Now the easiest solution I can see is to just Hide the downloads link in the left hand nav pane, however I am having some trouble rolling this out via GPO. This is because the registry value requires a permission change before it can be edited .


    Anybody else faced something like this before?

    Anybody know a simple way to hide the Favorites link from the Nav pane?

    I have managed to get this working with local registry changed but I am unable to get it working on mass.


    Thank you.
    Last edited by vortex999; 15th January 2014 at 10:05 AM.

  2. #2

    Join Date
    Oct 2012
    Posts
    58
    Thank Post
    7
    Thanked 5 Times in 4 Posts
    Rep Power
    4
    Anybody got an clue?

    I thought I would have some success with deleting the file directly from the mandatory profile, however that doesn't seem to work.

  3. #3

    john's Avatar
    Join Date
    Sep 2005
    Location
    London
    Posts
    10,535
    Thank Post
    1,496
    Thanked 1,051 Times in 920 Posts
    Rep Power
    303
    You can roll reg changes out via GPO would that not help you?

    As for your issue if its students you must have some permissions wrong somewhere, the group you say is causing this if it just has staff in it makes little sense if its students doing it unless the student has got in the staff group ?

  4. #4

    Michael's Avatar
    Join Date
    Dec 2005
    Location
    Birmingham
    Posts
    9,262
    Thank Post
    242
    Thanked 1,568 Times in 1,250 Posts
    Rep Power
    340
    If that's the case I would urgently review your NTFS permissions. User A trying to access User B's documents (even entering the path correctly), should be denied access. Even better, if home directories or important shares are made hidden, it makes entering the correct path a lot more difficult.

  5. #5

    Join Date
    Oct 2012
    Posts
    58
    Thank Post
    7
    Thanked 5 Times in 4 Posts
    Rep Power
    4
    Having played with this all morning, I think I have now cracked it!

    I seemed to have the "Everyone" permission added to student shares. Although this only had read access ?:/, removing it now makes the correct access denied dialog box appear. Is this correct?



    Quote Originally Posted by Michael View Post
    If that's the case I would urgently review your NTFS permissions. User A trying to access User B's documents (even entering the path correctly), should be denied access. Even better, if home directories or important shares are made hidden, it makes entering the correct path a lot more difficult.
    That was the strange part if I clicked on downloads to make the Path appear and then copy that path and paste it into another explorer window it would say access denied as its uses the server share.

    I think its something to do with the "Network" path beign at the start.

  6. #6

    Michael's Avatar
    Join Date
    Dec 2005
    Location
    Birmingham
    Posts
    9,262
    Thank Post
    242
    Thanked 1,568 Times in 1,250 Posts
    Rep Power
    340
    It sounds like you've solved it The Access Denied is the message you should expect to see

  7. #7


    Join Date
    Jan 2012
    Posts
    2,613
    Thank Post
    934
    Thanked 349 Times in 266 Posts
    Rep Power
    212
    It might be worth denying Student accounts the ability to navigate to network locations.
    We map student areas to M:/ (which is admittedly \\fileserver\kids\year\name) but if they typed their path in instead of M:/ they'd get a 'disabled due to restrictions by the administrator' (I think) message.
    Same with things like shared printers. They can see \\printserver\printer but if they tried to browse to it (either \\printserver or the actual printer), again, denied.
    Last edited by Garacesh; 15th January 2014 at 02:33 PM.

SHARE:
+ Post New Thread

Similar Threads

  1. Replies: 2
    Last Post: 5th September 2012, 11:47 AM
  2. Folder/Files Copying to Other Users in Domain
    By lthompson in forum Windows
    Replies: 2
    Last Post: 29th May 2012, 06:15 PM
  3. Replies: 2
    Last Post: 15th July 2010, 03:22 PM
  4. Allowing access to a single folder on C:
    By Ric_ in forum Windows
    Replies: 5
    Last Post: 2nd November 2005, 11:51 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •