+ Post New Thread
Page 2 of 2 FirstFirst 12
Results 16 to 28 of 28
Wireless Networks Thread, Group Policy in Technical; faza: you need to establish that the permissions one the folders are correct, if everyone has access to the root ...
  1. #16
    ICTNUT's Avatar
    Join Date
    Jul 2005
    Location
    Hereford
    Posts
    1,419
    Thank Post
    196
    Thanked 249 Times in 122 Posts
    Rep Power
    62

    Re: Group Policy

    faza: you need to establish that the permissions one the folders are correct, if everyone has access to the root share then they will be able to move around and yes eventually see all you have on the network.

    I would take a single student login as them and check that you can traverse the network as you say above.

    Next work from the students home share upwards checking the permissions not only on the share but the NTFS permissions also, I am sure you will see that there are permissions set that is allowing user
    to go all the way up.

    [edit]

    Looking at the workflow I would assume that this is the scenario that you are following:

    You creat a new user in AD and at the same time under the profile tab for the new user you point to \\server\studentsshare

    Whent he new user logs on you are using some kind of login script to map the above home drive.

    If this is the case them the user will be able to move all the way up.

    You will need to create the user in AD and add the path to thier home share under the profile tab.

    Then you will need to go into the GPO that affects the student and goto;
    User Configuration --> Windows Settings --> Folder Redirection --> My Documents --> right Click --> Properties

    The first option should be set to "Basic" and the second option should be "redirect to the users home folder".

    Now by doing this when you click on the "Up one level" button it will take you to "My Computer" and then the Desktop and no further.

    This would allow you to investigate UNC path mapping at your leisure and remove some pressure.

    [/edit]

  2. #17

    Geoff's Avatar
    Join Date
    Jun 2005
    Location
    Fylde, Lancs, UK.
    Posts
    11,803
    Thank Post
    110
    Thanked 583 Times in 504 Posts
    Blog Entries
    1
    Rep Power
    224

    Re: Group Policy

    My bad. I was having NT4 flashbacks.

    Disable the 'Computer Browser' service.

  3. #18

    Join Date
    Dec 2005
    Posts
    453
    Thank Post
    4
    Thanked 1 Time in 1 Post
    Rep Power
    0

    Re: Group Policy

    If i disable Computer Browser wont that effect some things on the netowrk. Like me the administrator i will not be able to see it listed will i?

  4. #19

    Geoff's Avatar
    Join Date
    Jun 2005
    Location
    Fylde, Lancs, UK.
    Posts
    11,803
    Thank Post
    110
    Thanked 583 Times in 504 Posts
    Blog Entries
    1
    Rep Power
    224

    Re: Group Policy

    If your using a machine with no Computer Browser service then yes, you wont see anything on the network.

    Use a security filter on the GPO to selectively disable it on the computers you want.

  5. #20

    Join Date
    Dec 2005
    Posts
    453
    Thank Post
    4
    Thanked 1 Time in 1 Post
    Rep Power
    0

    Re: Group Policy

    Quote Originally Posted by Geoff
    If your using a machine with no Computer Browser service then yes, you wont see anything on the network.

    Use a security filter on the GPO to selectively disable it on the computers you want.
    Geoff

    As i am new to the security filter could you please advise me on how to perform this?

    Sorry to be a bother

  6. #21

    Geoff's Avatar
    Join Date
    Jun 2005
    Location
    Fylde, Lancs, UK.
    Posts
    11,803
    Thank Post
    110
    Thanked 583 Times in 504 Posts
    Blog Entries
    1
    Rep Power
    224

    Re: Group Policy

    1. Make a new group.
    2. Add the machines accounts you want to apply the GPO to the group.
    3. Go to the GPO in the GPMC
    4. Remove the 'Authenticated Users' group from the security filters list.
    5. Add the group you just made to the security filters list.

  7. #22

    Join Date
    Dec 2005
    Posts
    453
    Thank Post
    4
    Thanked 1 Time in 1 Post
    Rep Power
    0

    Re: Group Policy

    Thanks Geoff

  8. #23
    DMcCoy's Avatar
    Join Date
    Oct 2005
    Location
    Isle of Wight
    Posts
    3,432
    Thank Post
    10
    Thanked 488 Times in 428 Posts
    Rep Power
    111

    Re: Group Policy

    Ok, I have had a long battle with file sharing and permissions and here are a few things I have come across:

    Some programs try to start at the root of the share, it they can't see the folders on the way to the redirected my documents they have an error. This affects Office and windows installer and Sims.net.

    Office gives a permission error when going to save as, msi files give an invalid character in my documents and sims.net has an exception trying to create the My SIMS Documents folder in the home directory.

    This was with a single user share when the users had no permissions on the folders preceding their home folder. My documents was redirected to their home folder.

    This was fixed by splitting the share in to three main areas, administrators, staff and students. I then added the relevant groups to the folder permission on the folders required to reach their home folder from the root of that share. I added the group to "This Folder only" -> This bit is very important. It means that students and staff can see the folders of the other users in their group but attempting to access them results in a denied error (due to the this folder only).

    Hidden shares aren't much help as they get shown when the drive is mapped anyway. I prefered when windows only told you the drive letter not the path to its share too.

    Oh and disabling the network browsing never stopped anyone poking about the network, its trivial to get around. Disabling the browser service sounds more promising, but I'm not sure what else the relies on unc paths this might break.

  9. #24

    Join Date
    Dec 2005
    Posts
    453
    Thank Post
    4
    Thanked 1 Time in 1 Post
    Rep Power
    0

    Re: Group Policy

    Im still having difficulty creating this group

    Sorry

  10. #25

    Join Date
    Dec 2005
    Posts
    453
    Thank Post
    4
    Thanked 1 Time in 1 Post
    Rep Power
    0

    Re: Group Policy

    Could somebody advise me on if i am correctly setting the users area up.

    1) I have a folder called users which is shared
    2) Within that folder i have the different year groups folders which are also shared
    3) Inside each year group folder is the pupils shared folder

    Within the AD i specify the home folder to be h:\ and \\servername\pupilarea


    Is this correct as still when the pupil selects up one level they are able to see the shares and then the domains. Can this be prevented

    Can anyone please help

    Any help would be very much appreciated!!!

    Faza

  11. #26

    Gatt's Avatar
    Join Date
    Jan 2006
    Posts
    6,658
    Thank Post
    858
    Thanked 646 Times in 429 Posts
    Rep Power
    498

    Re: Group Policy

    I had this same problem with Office 2000, only way round it was to change their Default File Locations to their home Drive, in all the apps using the .ADM files for O2K.
    Now they get My Computer -> H: drive -> Pen Drive -> Pupil Shared area.

    A few bugs though

    1) Pub9.adm failed to import to GPO cos of tabbing
    2) Access & Frontpage ADM files dont have options to change the default file locations!

    Upgrading them all to Office 2003 over summer - so the default file locations have been written into an MST file for them

  12. #27

    Join Date
    Dec 2005
    Posts
    453
    Thank Post
    4
    Thanked 1 Time in 1 Post
    Rep Power
    0

    Re: Group Policy

    Craig

    Sorry to be a pain but a MST file? never heard of that before.

    Is that just like a batch file net use command?

  13. #28

    Join Date
    Dec 2005
    Posts
    453
    Thank Post
    4
    Thanked 1 Time in 1 Post
    Rep Power
    0

    Re: Group Policy

    I have downlloaded wininstall but unsure on how to create a mst file.

SHARE:
+ Post New Thread
Page 2 of 2 FirstFirst 12

Similar Threads

  1. Group policy
    By pedster666 in forum Hardware
    Replies: 5
    Last Post: 27th February 2008, 10:03 AM
  2. group policy not being seen at all
    By krisd32 in forum Windows
    Replies: 5
    Last Post: 31st August 2007, 09:07 AM
  3. group policy
    By kevin_lane in forum How do you do....it?
    Replies: 2
    Last Post: 27th July 2007, 12:17 PM
  4. Group policy etc
    By moiebus in forum Wireless Networks
    Replies: 20
    Last Post: 8th November 2006, 11:48 PM
  5. Group Policy
    By faza in forum Wireless Networks
    Replies: 2
    Last Post: 23rd May 2006, 07:30 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •