+ Post New Thread
Results 1 to 12 of 12
Windows Server 2000/2003 Thread, Word 2003/Program UNC Browsing in Technical; Hi all I know similar threads have been posted so I'm sorry if I sound repetitive. We have just moved ...
  1. #1
    rh91uk's Avatar
    Join Date
    Sep 2008
    Location
    UK
    Posts
    877
    Thank Post
    137
    Thanked 132 Times in 114 Posts
    Rep Power
    36

    Unhappy Word 2003/Program UNC Browsing

    Hi all

    I know similar threads have been posted so I'm sorry if I sound repetitive.

    We have just moved our server's from Ranger to Vanilla. All very good, locked down most of the servers, redone all the permissions.

    Now, I have a problem. Where as in windows explorer a user will get denied when they try and visit a UNC path - in Word, in the Open Dialog box, they can type in \\servername and get the server.

    Now, i've tried turning off Computer browsing service, disabled all relevant gpos to do with network browsing (my network places etc) and double checked the permissions - but i'm not progressing anywhere! I haven't a clue how to stop kids going \\servername and stop browsing the network. I am at a loss. I have even tried an application policy in abtutor which doesn't work.

    I know the permissions are there but I would really prefer the kids not to have the opportunity to go hunting.

    Any help would really be appreciated, with reps awarded

    Thanks


    Richard

  2. #2

    FN-GM's Avatar
    Join Date
    Jun 2007
    Location
    UK
    Posts
    16,374
    Thank Post
    906
    Thanked 1,811 Times in 1,559 Posts
    Blog Entries
    12
    Rep Power
    468
    There is a way to stop it. Off the top of my head i dont know will have to look into group policy. What version of active directory are you using? Are you using Server 2003?

  3. Thanks to FN-GM from:

    rh91uk (17th May 2009)

  4. #3
    rh91uk's Avatar
    Join Date
    Sep 2008
    Location
    UK
    Posts
    877
    Thank Post
    137
    Thanked 132 Times in 114 Posts
    Rep Power
    36
    Hi FN-GM, thanks, would be really greatful. Active Directory Windows Sever 2003 R2

  5. #4
    rh91uk's Avatar
    Join Date
    Sep 2008
    Location
    UK
    Posts
    877
    Thank Post
    137
    Thanked 132 Times in 114 Posts
    Rep Power
    36
    I have stopped browsing from word hyperlinks too, btw.

    richard

  6. #5
    leco's Avatar
    Join Date
    Nov 2006
    Location
    West Yorkshire
    Posts
    2,026
    Thank Post
    595
    Thanked 125 Times in 119 Posts
    Rep Power
    42
    I seem to recall a GPO to prevent searching from the address bar - would that do?

  7. Thanks to leco from:

    rh91uk (17th May 2009)

  8. #6

    Gatt's Avatar
    Join Date
    Jan 2006
    Posts
    6,820
    Thank Post
    883
    Thanked 685 Times in 454 Posts
    Rep Power
    505
    I had this issue not that long ago and I got round it by using access based enumeration. we were also using dfs so don't know if its needed for abe to work?

  9. Thanks to Gatt from:

    rh91uk (17th May 2009)

  10. #7
    rh91uk's Avatar
    Join Date
    Sep 2008
    Location
    UK
    Posts
    877
    Thank Post
    137
    Thanked 132 Times in 114 Posts
    Rep Power
    36
    Hi all thanks for your replies. I tried the Access Based Enumeration but that doesn't do the job

    Any other ideas?

  11. #8

    FN-GM's Avatar
    Join Date
    Jun 2007
    Location
    UK
    Posts
    16,374
    Thank Post
    906
    Thanked 1,811 Times in 1,559 Posts
    Blog Entries
    12
    Rep Power
    468
    Sorry i forgot to look i will have a look for it.

  12. Thanks to FN-GM from:

    rh91uk (18th May 2009)

  13. #9

    Michael's Avatar
    Join Date
    Dec 2005
    Location
    Birmingham
    Posts
    9,345
    Thank Post
    242
    Thanked 1,602 Times in 1,278 Posts
    Rep Power
    346
    Unfortunately even if you lock down or remove access to 'My Network Places' some applications still ignore this and you can browse the network. However, on a positive, if you're good at setting permissions you have nothing to worry about.

    Access Based Enumeration takes things one step further and completely hides shares a user doesn't have permission to access if you're after a little more stealth.

    @richardharris, when you say ABE doesn't do the job, are you saying all shares are still displayed or users can access any share? Either way, you need to double check your permissions!

  14. Thanks to Michael from:

    rh91uk (18th May 2009)

  15. #10
    rh91uk's Avatar
    Join Date
    Sep 2008
    Location
    UK
    Posts
    877
    Thank Post
    137
    Thanked 132 Times in 114 Posts
    Rep Power
    36
    @ FN-GM thanks

    @ Michael - sorry, I should of been more clearer. ABE does do the job, but I want to hide the computers when a user browses to \\servername.

    All folder permissions are fine, thank god! Users can only access the shares they need to plus the share we install things on the network to. It's just things like seeing computers etc, but Computing Browsing Service is off in the services GPO and it's still happening.

    I'm slightly confused Thank you all for the replies - it's good we can rely on edugeek when we're in a bit of a pickle.

    Richard

  16. #11

    Join Date
    Sep 2007
    Posts
    90
    Thank Post
    7
    Thanked 32 Times in 17 Posts
    Rep Power
    20
    Here's a few tricks i've learned that might help you.
    Besides correct permissions and using ABE:
    -If you create your shares using a name that ends with a $ sign, the share will be
    invisible in the browse list, yet still accesible given the correct permissions.
    Example: \\servername\shared will show up but \\servername\shared$ will not.


    -The same goes for server names: using a (NetBIOS)name that ends with a $ sign,
    the server will be invisible in the browse list. So server1 will show up in network neighborhood,
    but server1$ will not.

    Ofcourse this is a major change in your network and requires carefull planning and testing.
    There are some applications that will work problematic with hidden shares/servers.
    An example i've experienced is Veritas BackupExec: how am i going to add a certain share
    to a backup job if i can't see it listed in the file/network browser!

    One final trick i've found out by accident and is actually more a NetBIOS bug/limitation:
    If the comment/description field in My computer/properties/computername tab is longer than
    (i think) 24 characters the computer will also stop showing up in the browse list. But i can't
    guarantee this will always work...
    Last edited by rvdmast; 24th May 2009 at 11:54 PM.

  17. Thanks to rvdmast from:

    rh91uk (25th May 2009)

  18. #12
    rh91uk's Avatar
    Join Date
    Sep 2008
    Location
    UK
    Posts
    877
    Thank Post
    137
    Thanked 132 Times in 114 Posts
    Rep Power
    36
    rvdmast - cheers for that! Something to look into with Soulfish.



SHARE:
+ Post New Thread

Similar Threads

  1. Word 2003 / Word 2007 .doc file association problem
    By noah in forum Office Software
    Replies: 10
    Last Post: 5th January 2010, 10:39 PM
  2. Word 2003 issues
    By spider6986 in forum Windows
    Replies: 7
    Last Post: 24th April 2009, 10:55 AM
  3. MS Word 2003 (as part of Office 2003) Printing Problems...
    By markwilliamson2001 in forum Windows
    Replies: 2
    Last Post: 22nd November 2007, 02:06 PM
  4. Replies: 9
    Last Post: 2nd November 2007, 09:55 PM
  5. word 2003 adm
    By chrbb in forum How do you do....it?
    Replies: 11
    Last Post: 20th June 2007, 01:06 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •