+ Post New Thread
Results 1 to 13 of 13
Windows Server 2008 R2 Thread, Shortcuts giving student access to restricted drives in Technical; We have recently been having an issue where by students have worked out that by going New - Shortcut they ...
  1. #1

    Join Date
    Mar 2010
    Location
    Gloucestershire
    Posts
    189
    Thank Post
    23
    Thanked 3 Times in 3 Posts
    Rep Power
    10

    Shortcuts giving student access to restricted drives

    We have recently been having an issue where by students have worked out that by going New - Shortcut they can access our public drive which gives them access to the networked programs, even though if they try to access it normally through windows explorer it gives them a restricted error.

    Has anybody else had this issue and how have you resolved it?

    I have prevented the creation of new shortcuts through a registry change and have tried to disable lnk files being run in home drives and usb sticks using the software restriction policy which hasn't worked (thanks Microsoft - another success). I just want to stop existing shortcuts being run.

    Help!

  2. #2
    Duke5A's Avatar
    Join Date
    Jul 2010
    Posts
    859
    Thank Post
    88
    Thanked 154 Times in 124 Posts
    Blog Entries
    8
    Rep Power
    36
    It sounds like you're going about this the wrong way; you're trying to disable student's ability to browse rather than setting permissions correctly on those shared resources. You need to disable read to that share for all students.

  3. #3

    Join Date
    Mar 2010
    Location
    Gloucestershire
    Posts
    189
    Thank Post
    23
    Thanked 3 Times in 3 Posts
    Rep Power
    10
    Hi Duke5A, i have tried that but when I disable read, they can't access the software.

  4. #4

    Join Date
    Jun 2009
    Location
    Edinburgh
    Posts
    136
    Thank Post
    5
    Thanked 23 Times in 16 Posts
    Rep Power
    15
    Disable right-click via GPO for all students

  5. #5
    cromertech's Avatar
    Join Date
    Dec 2007
    Location
    Cromer by the coast
    Posts
    731
    Thank Post
    177
    Thanked 109 Times in 97 Posts
    Rep Power
    55
    Hide all of the folders/shortcuts so it will just appear empty but the shorcuts will still run.
    I'm a bit confused as to why it's a problem for them to browse there if they are allowed to run the applications anyway?

  6. #6

    Join Date
    Mar 2010
    Location
    Gloucestershire
    Posts
    189
    Thank Post
    23
    Thanked 3 Times in 3 Posts
    Rep Power
    10
    Hi Network41, I have done that now, and i have prevented them creating new shortcuts, but my only concern is if they have an existing shortcut on a memory stick. I have hidden everything in that drive with the idea that they can mess with what they can't see.

  7. #7
    simpsonj's Avatar
    Join Date
    Apr 2009
    Location
    Oxford
    Posts
    414
    Thank Post
    168
    Thanked 71 Times in 60 Posts
    Blog Entries
    8
    Rep Power
    23
    What happens if you deny traverse permissions rather than read permissions?

  8. #8

    Join Date
    Mar 2010
    Location
    Gloucestershire
    Posts
    189
    Thank Post
    23
    Thanked 3 Times in 3 Posts
    Rep Power
    10
    Cromertech - As a few pieces of software requires them to write to the program for example reading tests and so they can do some damage.

    SimpsonJ - Traverse combined with execute, so if i deny that I deny them the ability to run the programs.

  9. #9
    SovietRussia's Avatar
    Join Date
    Mar 2013
    Location
    Powys, Wales
    Posts
    708
    Thank Post
    77
    Thanked 159 Times in 124 Posts
    Rep Power
    49
    Quote Originally Posted by network41 View Post
    Disable right-click via GPO for all students
    File > New > Shortcut

    (Or if no toolbar, Alt > File > New > Shortcut)
    Last edited by SovietRussia; 2nd December 2013 at 04:44 PM.

  10. #10

    Join Date
    Mar 2010
    Location
    Gloucestershire
    Posts
    189
    Thank Post
    23
    Thanked 3 Times in 3 Posts
    Rep Power
    10
    Its ok, I deleted the registry entry to create new shortcuts via a batch file. Not ideal I know, but as a temp fix it works, so it doesn't appear on right click or on File > New either

  11. #11
    simpsonj's Avatar
    Join Date
    Apr 2009
    Location
    Oxford
    Posts
    414
    Thank Post
    168
    Thanked 71 Times in 60 Posts
    Blog Entries
    8
    Rep Power
    23
    Have you disabled Right Click - Send To - Desktop (Create shortcut)?

    Face palm about traverse, should have seen that! Can you make the entire share a hidden share? Not many students know to add the dollar sign at the end...

  12. #12

    Join Date
    Mar 2010
    Location
    Gloucestershire
    Posts
    189
    Thank Post
    23
    Thanked 3 Times in 3 Posts
    Rep Power
    10
    I have disabled the desktop so that they can't send anything to it full stop!! Thats ok, I have tried everything. With regards to hiding, they were able to create a shortcut put a drive letter in, don't ask me how they found out they must have tried every one e.g. P:\ and it fills in the rest for them and creates the shortcut to the drive.

  13. #13
    simpsonj's Avatar
    Join Date
    Apr 2009
    Location
    Oxford
    Posts
    414
    Thank Post
    168
    Thanked 71 Times in 60 Posts
    Blog Entries
    8
    Rep Power
    23
    Just ensure that it doesn't say something along the lines of 'Desktop is unavailable, would you like to make the shortcut here instead?'

    I've had similar issues with students accessing the C: drive using this method...



SHARE:
+ Post New Thread

Similar Threads

  1. Replies: 7
    Last Post: 23rd May 2013, 01:57 PM
  2. Students access to printers
    By ltunstall in forum Windows
    Replies: 10
    Last Post: 10th March 2008, 08:50 PM
  3. Staff Remote Access to Home Drive
    By link470 in forum Windows
    Replies: 10
    Last Post: 21st January 2008, 09:38 AM
  4. Giving user access to all home directories
    By paularmstrong in forum Windows
    Replies: 11
    Last Post: 7th November 2007, 09:27 AM
  5. Prevent Student Access To Command Prompt
    By DaveP in forum How do you do....it?
    Replies: 13
    Last Post: 21st March 2007, 12:37 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •