Windows Thread, Windows Search 4.0 in Technical; Oh dear oh dear.
I found this and thought it was such an improvement on WDS3.1, so much so I ...
7th July 2008, 04:29 PM #1
Windows Search 4.0
Oh dear oh dear.
I found this and thought it was such an improvement on WDS3.1, so much so I thought it was definately going in the next image.
Well I was just coming to take the image and thought...I wonder...
So, I log in with my test Pupil account.
Choose to search for 'Key Stage' and change the location to P:\Staff, which as the path suggests is the staff area that students are not allowed to access.
Anyway off it went, took a while but eventually returned a nice long list of files, which I can then preview or open as I like!
Removal starting now.
Thanks to mrforgetful from:
IDG Tech News
7th July 2008, 04:34 PM #2
Thanks for that heads up... saving me a job removing that after the damage has been done
7th July 2008, 04:37 PM #3
It is strange, because if I remember correctly, if I just searched P:\ then folders the account had no rights to weren't searched, only if I chose the folder itself.
7th July 2008, 04:44 PM #4
What account is the WDS process running under?
It should not be able to ignore NTFS permissions over a network.
7th July 2008, 04:47 PM #5
I don't know on the test machine as it's uninstalled now and imaging - I'll reinstall and look tomorrow.
As for my the Windows Search service on my machine (which I've not changed from default) it is running as 'Local System account' and cannot interact with the desktop.
7th July 2008, 04:52 PM #6
Ok, second question for when you try again, why is P:\Staff mapped if the student account shouldn't have access to it?
7th July 2008, 05:00 PM #7
Our public drive is P:\ which gets mapped for everyone.
All information people want to share is stored on this one mapped drive.
Staff is a folder on P:\ to which students do not have access rights, but it can still be seen.
Just as within the Staff Folder there is Geography Staff to which only Geography Staff have access but any Staff can see it listed.
7th July 2008, 05:29 PM #8
Ahh i see we tend to have seperate staff and pupil shares so they can't even see staff folders.
Are you using 2003 server? If so you can turn on Access Based Enumeration and this hides folders that a user has no access too.
By mortstar in forum Windows
Last Post: 17th June 2008, 02:56 PM
By mrforgetful in forum Windows
Last Post: 29th April 2008, 01:10 PM
By jonbones in forum Windows
Last Post: 9th November 2007, 06:36 PM
By AlexB in forum Windows
Last Post: 17th April 2007, 10:38 AM
By DaveP in forum How do you do....it?
Last Post: 22nd March 2007, 02:46 PM
Users Browsing this Thread
There are currently 1 users browsing this thread. (0 members and 1 guests)