+ Post New Thread
Page 2 of 2 FirstFirst 12
Results 16 to 23 of 23
Wireless Networks Thread, Pupils accessing servers and shared folders in Technical; Its so hard just tio remove the servers from the list so pupils cant access them or see them....
  1. #16

    Join Date
    Dec 2005
    Posts
    453
    Thank Post
    4
    Thanked 1 Time in 1 Post
    Rep Power
    0

    Re: Pupils accessing servers and shared folders

    Its so hard just tio remove the servers from the list so pupils cant access them or see them.

  2. #17

    mattx's Avatar
    Join Date
    Jan 2007
    Posts
    9,249
    Thank Post
    1,061
    Thanked 1,070 Times in 626 Posts
    Rep Power
    741

    Re: Pupils accessing servers and shared folders

    the pupil workstation will not be able to see the server to get things such as application and stuff.
    No they won't - it depends how you have setup the apps etc.
    You may have a problem with Net View - but who uses that ?

  3. #18

    Join Date
    Dec 2005
    Posts
    453
    Thank Post
    4
    Thanked 1 Time in 1 Post
    Rep Power
    0

    Re: Pupils accessing servers and shared folders

    We have a serpate apps server and the shortcuts go to that server

  4. #19
    richardp's Avatar
    Join Date
    May 2007
    Location
    North Yorkshire
    Posts
    131
    Thank Post
    3
    Thanked 25 Times in 25 Posts
    Rep Power
    20

    Re: Pupils accessing servers and shared folders

    Hi,

    You need to go into group policy management and edit your top level policy. Go to User Configuration / Administrative Templates / System. In the top level of System there is an option called "Don't run specified Windows applications". You need to enable this and add "explorer.exe" to the list of disallowed applications (by clicking on properties on the above item).

    This stops a user from launching any program in that list but does not prevent the system process from doing so. Which obviously allows the shell to run correctly. This is not perfect but if you do this as well as prevent access as I mentioned earlier it should stop them from doing what you have described.

    Richard

  5. #20

    Join Date
    Dec 2005
    Posts
    453
    Thank Post
    4
    Thanked 1 Time in 1 Post
    Rep Power
    0

    Re: Pupils accessing servers and shared folders

    Its still happening :-(

  6. #21

    Join Date
    Dec 2005
    Posts
    453
    Thank Post
    4
    Thanked 1 Time in 1 Post
    Rep Power
    0

    Re: Pupils accessing servers and shared folders

    richardp - When a user double clicks on programs explorer still opens.

  7. #22
    richardp's Avatar
    Join Date
    May 2007
    Location
    North Yorkshire
    Posts
    131
    Thank Post
    3
    Thanked 25 Times in 25 Posts
    Rep Power
    20

    Re: Pupils accessing servers and shared folders

    Hello again,

    it sounds to me like you have not enabled the other relevant group policy options. As BKGarry said before you cannot completely block the explorer process as it is the shell for windows and is required. I have gone through our top level default group policy and picked out what I think are all the relevant options you need to look at :

    User Configuration \ Administrative Templates \ Windows Components \ Windows Explorer
    Removes the Folder Options menu item from the tools menu - ENABLED
    Remove File menu from windows explorer - ENABLED
    Remove "Map Network Drive" and "Disconnect Network Drive" - ENABLED
    Remove Search button from windows explorer - ENABLED
    Hides the manage item on the windows explorer context menu - ENABLED
    Hide these specified drives in My Computer - Restrict C drive only - ENABLED
    No "Computers Near Me" in My Network Places - ENABLED
    No "Entire Network" in My Network Places - ENABLED

    User Configuration \ Administrative Templates \ Start Menu and Taskbar
    Remove My Documents icon from the Start Menu - ENABLED
    Remove Documents menu from Start Menu - ENABLED
    Remove Network Connections from Start Menu - ENABLED
    Remove Search menu from Start Menu - ENABLED
    Remove Run menu from Start Menu - ENABLED
    Remove Drag and Drop context menus on the Start Menu - ENABLED
    Prevent changes to Taskbar and Start Menu settings - ENABLED
    Remove access to the context menus for the taskbar - ENABLED
    Do not use the search based method when resolving shell shortcuts - ENABLED
    Do not use the tracking based method when resolving shell shortcuts - ENABLED

    User Configuration \ Administrative Templates \ Desktop
    Remove My Documents icon on the desktop - ENABLED
    Remove properties from the My Computer context menu - ENABLED
    Hide My Network Places icon on desktop - ENABLED
    Prohibit user from changing my documents path - ENABLED
    Don't save settings at exit - ENABLED

    User Configuration \ Administrative Templates \ Network \ Network Connections
    Prohibit access to the New Connection Wizard - ENABLED

    User Configuration \ Administrative Templates \ System
    Prevent access to the command prompt - ENABLED
    Prevent access to registry editing tools - ENABLED
    Don't run specified Windows applications - ENABLED - explorer.exe

    By enabling the above options my users are unable to access the network apart from through server shares mapped to drive letters in the main vb login script. Even if they do as you describe they can never get to a point where they can see the network or any icons for it. Even if they run my computer and type in a network path (such as \\servername\sharename) it returns an error message.

    Again you should also be looking at your share permissions at the same time so if they do somehow manage to get to the network they will be unable to access any shares that they should not have access to anyway.

    I hope some of this helps, I am no expert with AD but it seems to work for me!

    Richard

  8. #23
    apur32's Avatar
    Join Date
    Mar 2009
    Location
    London
    Posts
    75
    Thank Post
    2
    Thanked 3 Times in 3 Posts
    Rep Power
    12

    Richardp group polices

    Quote Originally Posted by faza View Post
    richardp - When a user double clicks on programs explorer still opens.
    We have the same problem at our school which I have just noticed today. Are the group policies given by richard work or not?

    Are the students still accessing the server shares?

    Thanks,

    Shoaib



SHARE:
+ Post New Thread
Page 2 of 2 FirstFirst 12

Similar Threads

  1. pupils accessing c: drive
    By jonbones in forum Windows
    Replies: 7
    Last Post: 29th August 2009, 07:17 PM
  2. Pupils moving folders
    By wadeeuk in forum How do you do....it?
    Replies: 14
    Last Post: 14th November 2007, 08:08 AM
  3. Replies: 6
    Last Post: 5th June 2007, 03:35 PM
  4. Moving Shared Folders and Home Drives
    By secman in forum Windows
    Replies: 4
    Last Post: 31st August 2006, 09:23 PM
  5. Students accessing the Servers through Word
    By ninjabeaver in forum Windows
    Replies: 33
    Last Post: 3rd February 2006, 05:43 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •