+ Post New Thread
Page 1 of 2 12 LastLast
Results 1 to 15 of 16
Windows Server 2000/2003 Thread, Stopping access to a share in Technical; Not sure if this is even possible but I want to stop users accessing a hidden share by typing the ...
  1. #1

    Join Date
    Mar 2007
    Posts
    421
    Thank Post
    14
    Thanked 16 Times in 10 Posts
    Rep Power
    19

    Stopping access to a share

    Not sure if this is even possible but I want to stop users accessing a hidden share by typing the share in Word (i.e \\server\share$) and browsing it.

    Now, I know I can use permissions to do this, but they need write access to this share (for a program than runs at login) but I don't want them to browse the share and delete files themselves!

    If they type \\server\share$ into Explorer its blocked, but Word etc doesn't stop them!

  2. #2
    36Degrees's Avatar
    Join Date
    Jan 2010
    Location
    Nottingham
    Posts
    1,059
    Thank Post
    165
    Thanked 153 Times in 124 Posts
    Rep Power
    52
    I assume you have set an advanced permission so that they cannot access "this folder only"?

  3. #3

    Join Date
    Mar 2007
    Posts
    421
    Thank Post
    14
    Thanked 16 Times in 10 Posts
    Rep Power
    19
    That won't really help, as their account needs to have delete/modify rights for the folder that is shared (the delete is done by a program running under their account)

    Its really to stop them browsing the folder and deleting the files manually

  4. #4
    sister_annex's Avatar
    Join Date
    Jan 2009
    Location
    Wolverhampton
    Posts
    593
    Thank Post
    99
    Thanked 135 Times in 119 Posts
    Rep Power
    49
    does the program have to run under their account??

    Mark

  5. #5

    Join Date
    Mar 2007
    Posts
    421
    Thank Post
    14
    Thanked 16 Times in 10 Posts
    Rep Power
    19
    Unfortunately yes, unless I can find a way of making VB6 connect to a \\share using other credentials!

  6. #6
    sister_annex's Avatar
    Join Date
    Jan 2009
    Location
    Wolverhampton
    Posts
    593
    Thank Post
    99
    Thanked 135 Times in 119 Posts
    Rep Power
    49
    ah,

    I know you can run processes as other users in .net but i dont know vb6 that well

  7. #7

    Join Date
    Mar 2007
    Posts
    421
    Thank Post
    14
    Thanked 16 Times in 10 Posts
    Rep Power
    19
    Yeah it looks like a re-write of the code, or finding another way altogether.

    Its a catch 22 situation, they need write access, but I want to stop write access

  8. #8
    sister_annex's Avatar
    Join Date
    Jan 2009
    Location
    Wolverhampton
    Posts
    593
    Thank Post
    99
    Thanked 135 Times in 119 Posts
    Rep Power
    49
    What is it you are looking to re-write - or more plainly what does the program do?

  9. #9
    p858snake's Avatar
    Join Date
    Dec 2008
    Location
    Queensland
    Posts
    1,490
    Thank Post
    37
    Thanked 175 Times in 151 Posts
    Blog Entries
    2
    Rep Power
    51
    Quote Originally Posted by GoldenWonder View Post
    Not sure if this is even possible but I want to stop users accessing a hidden share by typing the share in Word (i.e \\server\share$) and browsing it.

    Now, I know I can use permissions to do this, but they need write access to this share (for a program than runs at login) but I don't want them to browse the share and delete files themselves!

    If they type \\server\share$ into Explorer its blocked, but Word etc doesn't stop them!
    Using NTFS permissions:
    Add the group you want to restrict -> and Deny "Read", "List folder contents", "Read and Execute".

    Basically this means, the user will still be able to create in it, but the moment they do create it will disappear from view nor will they be able to open anything in it.

    If the files aren't getting over-ridden by the script, you may also be able to remove "modify".
    Last edited by p858snake; 25th March 2010 at 12:08 PM.

  10. #10
    sister_annex's Avatar
    Join Date
    Jan 2009
    Location
    Wolverhampton
    Posts
    593
    Thank Post
    99
    Thanked 135 Times in 119 Posts
    Rep Power
    49
    Quote Originally Posted by p858snake View Post
    Using NTFS permissions:
    Add the group you want to restrict -> and Deny "Read", "List folder contents", "Read and Execute".

    Basically this means, the user will still be able to create in it, but the moment they do create it will disappear from view nor will they be able to open anything in it.

    If the files aren't getting over-ridden by the script, you may also be able to remove "modify".
    I completley forgot about doing it that way... whoops

  11. #11
    36Degrees's Avatar
    Join Date
    Jan 2010
    Location
    Nottingham
    Posts
    1,059
    Thank Post
    165
    Thanked 153 Times in 124 Posts
    Rep Power
    52
    Quote Originally Posted by GoldenWonder View Post
    That won't really help, as their account needs to have delete/modify rights for the folder that is shared (the delete is done by a program running under their account)

    Its really to stop them browsing the folder and deleting the files manually
    We have a folder on a share that has scripts in - the folder has access permission for "subfolders and files only" meaning that they can use the scripts inside but not open the folder they are in.

  12. #12

    Join Date
    Mar 2007
    Posts
    421
    Thank Post
    14
    Thanked 16 Times in 10 Posts
    Rep Power
    19
    Sorry, I should also mention that the program reads a file in there first, then writes or deletes depending on the outcome.

    Turning off rights to browse the folder stops the program from opening the file in the first instance.

  13. #13
    36Degrees's Avatar
    Join Date
    Jan 2010
    Location
    Nottingham
    Posts
    1,059
    Thank Post
    165
    Thanked 153 Times in 124 Posts
    Rep Power
    52
    Quote Originally Posted by GoldenWonder View Post
    Sorry, I should also mention that the program reads a file in there first, then writes or deletes depending on the outcome.
    That should be where the "subfolders and files only" permission comes in.

    Is the folder path visible to the students? I was about to suggest something then realised it wouldn't change anything if that path was now visible.
    Last edited by 36Degrees; 25th March 2010 at 12:43 PM.

  14. #14

    Join Date
    Mar 2007
    Posts
    421
    Thank Post
    14
    Thanked 16 Times in 10 Posts
    Rep Power
    19
    I think I've got this working now thanks to everyones help.

    When I set the permissions to deny browsing the top folder (this folder only) but allow modify/delete etc to Subfolders and Files, the program cannot delete the file. Presumably because VB6 'browses' the folder to delete it. It can still open,edit and save though!

    If I set the program to read/write into a subfolder from the main folder using the same permissions as above then this works. Not exactly as I'd expect but it must also be something to do with the way VB6 deletes files.

    Cheers for the help on this one!

  15. #15

    glennda's Avatar
    Join Date
    Jun 2009
    Location
    Sussex
    Posts
    7,808
    Thank Post
    272
    Thanked 1,135 Times in 1,031 Posts
    Rep Power
    349
    I think you can do it via group policy and deny browsing to UNC paths in windows explorer - im just trying to find the setting

    Toby

SHARE:
+ Post New Thread
Page 1 of 2 12 LastLast

Similar Threads

  1. Stopping Pupils Access Staff PC's
    By Grommit in forum Windows
    Replies: 16
    Last Post: 28th September 2010, 12:49 PM
  2. Stopping clients access dhcp when connected via wireless.
    By russdev in forum Wireless Networks
    Replies: 2
    Last Post: 20th November 2008, 12:08 PM
  3. Granting access to a share
    By leco in forum Windows
    Replies: 11
    Last Post: 7th November 2008, 01:23 PM
  4. Stopping MSTSC access across VLANs
    By ICTNUT in forum Wireless Networks
    Replies: 8
    Last Post: 7th August 2008, 04:33 PM
  5. Who is stopping up then?
    By russdev in forum General Chat
    Replies: 13
    Last Post: 7th January 2008, 08:42 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •