Quote Originally Posted by burgemaster View Post
They do need access to these shares, I will look at NTFS security changes, are you saying that staff can also do this on your network? Thanks for your reply.
yes. If staff or students really wanted to they can create a hyperlink in word and read the entire contents of our netlogon shares, there's probably a hundred other bits of software floating around that can do it too. About the worst thing that I think could happen (and correct me if i'm wrong) is that they could fill up their home drives if they decided to copy it all. not really a big deal IMO.
Remember 'hidden' shares in windows are NOT a security feature, it's just to tidy things up.
Perhaps you could deny groups of computers (rather than users) accessing the shares?
We firewall non-domain machines from accessing certain shares.