+ Post New Thread
Page 1 of 2 12 LastLast
Results 1 to 15 of 19
Windows 7 Thread, Windows 7 - Network in Technical; Hello, I am currently testing Windows 7 to roll out and have got GPO's configured pretty much how I want. ...
  1. #1
    lafleur1977's Avatar
    Join Date
    May 2009
    Location
    Lancashire
    Posts
    142
    Thank Post
    105
    Thanked 4 Times in 4 Posts
    Rep Power
    11

    Windows 7 - Network

    Hello,

    I am currently testing Windows 7 to roll out and have got GPO's configured pretty much how I want. One part I cannot change is the Network area on Windows 7. I have managed to hide it via a custom adm template but users can still access it in some places such as a unc path and this allows them access to every computer and their shares. Is there a way to disable the network area?

    Thanks
    Last edited by lafleur1977; 14th May 2012 at 02:32 PM.

  2. #2

    Join Date
    May 2012
    Location
    Location
    Posts
    81
    Thank Post
    17
    Thanked 7 Times in 6 Posts
    Rep Power
    6
    +1

    We are also having this problem, we havn't found a way to close the 'network' side to this, but we have placed permissions on all folders and computer in the network, so students get an error if they try to open any server folders e.t.c

    Ryan

  3. Thanks to RJohnson91 from:

    lafleur1977 (15th May 2012)

  4. #3

    Dos_Box's Avatar
    Join Date
    Jun 2005
    Location
    Preston, Lancashire
    Posts
    9,783
    Thank Post
    572
    Thanked 2,151 Times in 981 Posts
    Blog Entries
    23
    Rep Power
    625
    What server version are you using?

  5. Thanks to Dos_Box from:

    lafleur1977 (15th May 2012)

  6. #4
    lafleur1977's Avatar
    Join Date
    May 2009
    Location
    Lancashire
    Posts
    142
    Thank Post
    105
    Thanked 4 Times in 4 Posts
    Rep Power
    11
    Yeah our permissions mostly prevent them from accessing files and shares but there are some such as netlogon that they can get into. If it is possible it would be great to be able to stop them from accessing the network. We are using windows server 2008.

    Thanks

  7. #5
    cpjitservices's Avatar
    Join Date
    Jul 2010
    Location
    Hessle
    Posts
    2,419
    Thank Post
    507
    Thanked 282 Times in 258 Posts
    Rep Power
    81
    I remember in XP and 2003 you could completely lockout network access - so even if someone did get into the "Network" folder they couldnt see anything! Doesn't seem to be the case with Server 2008 / Win 7.

  8. Thanks to cpjitservices from:

    lafleur1977 (15th May 2012)

  9. #6
    apeo's Avatar
    Join Date
    Sep 2005
    Location
    Lost
    Posts
    1,612
    Thank Post
    95
    Thanked 115 Times in 111 Posts
    Rep Power
    41
    Have a look at this:

    Remove 'Network' from navigation pane

    We use GPP to do the reg hack.

    Also users cant use UNC path in address bar:

    http://technet.microsoft.com/en-us/l.../cc940457.aspx
    Last edited by apeo; 15th May 2012 at 09:10 AM.

  10. Thanks to apeo from:

    lafleur1977 (15th May 2012)

  11. #7
    lafleur1977's Avatar
    Join Date
    May 2009
    Location
    Lancashire
    Posts
    142
    Thank Post
    105
    Thanked 4 Times in 4 Posts
    Rep Power
    11
    Quote Originally Posted by apeo View Post
    Have a look at this:

    Remove 'Network' from navigation pane

    We use GPP to do the reg hack.

    Also users cant use UNC path in address bar:

    Remove Run menu from Start Menu
    I have been able to remove the network icon from the start menu and navigation panel okay but users can still access network via the address bar for some unc paths. The article you linked to goes to disabled the run command. If there is a way of hiding or disabling the address bar that would be great.

    Thanks

  12. #8
    apeo's Avatar
    Join Date
    Sep 2005
    Location
    Lost
    Posts
    1,612
    Thank Post
    95
    Thanked 115 Times in 111 Posts
    Rep Power
    41
    By disabling Run, you disable running unc paths in the address bar too. This works well for us we dont want to run either but I assume you want them to have the Run box?

    Im not sure its possible to disable the address bar in Windows Explorer in Windows 7.

  13. Thanks to apeo from:

    lafleur1977 (15th May 2012)

  14. #9
    adhutton's Avatar
    Join Date
    Dec 2008
    Location
    Northeast England
    Posts
    396
    Thank Post
    164
    Thanked 86 Times in 64 Posts
    Rep Power
    54
    Quote Originally Posted by lafleur1977 View Post
    I have been able to remove the network icon from the start menu and navigation panel okay but users can still access network via the address bar for some unc paths. The article you linked to goes to disabled the run command. If there is a way of hiding or disabling the address bar that would be great.

    Thanks
    Did you find a solution for this? - we are having the same problem.....

    Andrew

  15. Thanks to adhutton from:

    lafleur1977 (19th June 2012)

  16. #10
    lafleur1977's Avatar
    Join Date
    May 2009
    Location
    Lancashire
    Posts
    142
    Thank Post
    105
    Thanked 4 Times in 4 Posts
    Rep Power
    11
    Quote Originally Posted by adhutton View Post
    Did you find a solution for this? - we are having the same problem.....

    Andrew
    Unfortunately not. I have managed to hide the network icon from the start menu and also from windows explorer (using a custom adm template) but not via the address bar. I am just going to leave it because as long as permissions are correct on the network users shouldn't be able to get into anything they shouldn't be able to.

    Thanks

  17. Thanks to lafleur1977 from:

    adhutton (19th June 2012)

  18. #11
    adhutton's Avatar
    Join Date
    Dec 2008
    Location
    Northeast England
    Posts
    396
    Thank Post
    164
    Thanked 86 Times in 64 Posts
    Rep Power
    54
    Quote Originally Posted by lafleur1977 View Post
    Unfortunately not. I have managed to hide the network icon from the start menu and also from windows explorer (using a custom adm template) but not via the address bar. I am just going to leave it because as long as permissions are correct on the network users shouldn't be able to get into anything they shouldn't be able to.

    Thanks
    Many thanks. I think we are at about the same point as you.

    I haven't managed to find a way of blocking network browsing via address bar. Users cannot get into anything they shouldn't, but it worries me just in case we add something to the network in the future and maybe forget to tie-down the permissions as quickly as we should then they could potentially cause problems. I would much rather network browsing were hidden. I cannot believe how MS have dropped the ball so badly on this one!

    Cheers_ Andrew

  19. Thanks to adhutton from:

    lafleur1977 (19th June 2012)

  20. #12

    Join Date
    Oct 2005
    Location
    hey hey hey, stay outta my shed. STAY OUT OF MY SHED.
    Posts
    1,004
    Thank Post
    237
    Thanked 190 Times in 146 Posts
    Rep Power
    106
    Quote Originally Posted by adhutton View Post
    I cannot believe how MS have dropped the ball so badly on this one!
    I suspect, because they don't think they have. Fancy tricks to hide browsing from explorer give the illusion of security, but you still need to apply correct permissions to shares to ensure they actually are safe, at which point hiding their existence becomes moot. I know other people think and work differently and that's fine too but I'm kinda with them on this one.

  21. #13

    Geoff's Avatar
    Join Date
    Jun 2005
    Location
    Fylde, Lancs, UK.
    Posts
    11,802
    Thank Post
    110
    Thanked 583 Times in 504 Posts
    Blog Entries
    1
    Rep Power
    224
    I am not a fan of this. You've added a lot of complexity to your GPOs for very little real benefit. What's so wrong with just setting the network share permissions right in the first place?

  22. #14
    lafleur1977's Avatar
    Join Date
    May 2009
    Location
    Lancashire
    Posts
    142
    Thank Post
    105
    Thanked 4 Times in 4 Posts
    Rep Power
    11
    Quote Originally Posted by Geoff View Post
    I am not a fan of this. You've added a lot of complexity to your GPOs for very little real benefit. What's so wrong with just setting the network share permissions right in the first place?
    I don't think hiding network from the start menu and adding in small custom adm template to hide network from windows explorer is complex. Our network share permissions are set correctly too but users, and particularly students, mess about alot so for me it is important to hide as well as prevent access.

  23. Thanks to lafleur1977 from:

    adhutton (20th June 2012)

  24. #15

    Join Date
    Jan 2006
    Location
    Surburbia
    Posts
    2,178
    Thank Post
    74
    Thanked 307 Times in 243 Posts
    Rep Power
    115
    Me neither... if anything is going to tell a user to go away when they click it then I want it disappeared wherever possible to avoid unecessary user frustration/confusion. If you don't then there is far too much "Access denied.." "Your Administrator has disallowed..." for my liking.

  25. 2 Thanks to PiqueABoo:

    adhutton (20th June 2012), lafleur1977 (19th June 2012)

SHARE:
+ Post New Thread
Page 1 of 2 12 LastLast

Similar Threads

  1. Connecting a Windows network to an RM managed Network
    By Scruff in forum Wireless Networks
    Replies: 4
    Last Post: 8th February 2010, 11:53 PM
  2. MAC on Windows Network
    By frankybaloney in forum Mac
    Replies: 7
    Last Post: 3rd May 2007, 01:52 PM
  3. setting up a windows network
    By cooper in forum Windows
    Replies: 11
    Last Post: 26th April 2007, 04:18 PM
  4. Replies: 14
    Last Post: 9th March 2007, 11:53 AM
  5. Replies: 4
    Last Post: 16th January 2007, 08:36 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •