Office 2k3 "Insert Image from File" and "Mail Merge" prob

[Gatt]

OK heres the score

Over summer I created an MST for Office 2003, using the ORK, to force users to their Home Drive when saving/opening files, etc
I spent ages going through every option I could find and forcing it to Drive H: so that they cannot view the rest of the UNC path - just the drive letter.

However, today I got a report that kids are yet again accessing others files.

The way they are doing it is to Insert a Picture from file or in the Mail Merge Wizard.. there are probably more but I havent found them all yet

This happens in all Office 2003 Products

Has anyone else encountered this?
And more importantly - is there a fix??

[ChrisH]

What else are they getting into exactly?

[Gatt]

Ok setup is:

Home Drive = H:
UNC path = \\server\home$\year xx\username

Used the ORK and CHROOT'd them all to H:\ - worked fine till today when I noticed one of the little darlings with the following in the dropdown box:

"Network Places\server\home$\year xx\username"

Logged on as a test user and went to insert - picture - from file - and on the dialog box clicked "up" - I went from the home folder to year xx - where I could then browse AND modify any other users work
went up to home$ - into another year group - and did the same again to another user

Will try get a screenshot of the problem tomorrow if i can

This is a serious problem and I think i'll need to speak to M$ tomorrow about it

[NetworkGeezer]

The permissions should be set so that only a given user, the SYSTEM account and Domain Admins can access a folder.

Seeing someone else's folders is not too bad if the student can't get into it.

[Gatt]

That's how its setup on my system - but will double check though...

[NetworkGeezer]

Make sure that Everyone isn't listed as having full rights over the folder tree.

[ChrisH]

There must be any issue with your permissions somewhere as I have a similar setup and they cant get to any of that stuff.