Group Policy

Can anyone please help me


I have a network Server 2003 and XP clients, we are running a Group Policy on 5 separate OU's.

When the users are running any office application Word...

When you go to open and then click on the icon labelled "UP ONE LEVEL" it is showing files on the server.

Is there any way i can remove that icon or better still remove access to the server where there home directory is?

When they type in \\servername it is showing the shares and folders. Is there away i can stop users seeing the servers.

Steve

When my users go up a level they are just taken back to my computer.
I share the directory out on the server containing all the users files but they dont have any permissions on this. They then have permissions to their folder only. Because the system maps the drive everything works fine.

Yes i have the same setup but when i go up a level you can see the shares on the server. Can you suggest any ideas why it might be doing this

Infact if you continue to go up a level you eventually come to Entire network and can see all the servers

If you do not want users to be able to see shares on the servers you will need to create an administrative share by simply putting a $ at the end of the sharename.

Next make sure that the folders themselves have only permissions that are required for the job i.e.

Our assignments drive has the following;
Students : List, View, Read
Teachers: List, View, Read, modify
Admins: Full Control

The everyone group has been removed.

This generally means that the students can do nothing more that just read the contents of that folder.

There is a GPO setting that will stop UNC browsing so if you goto explorer and type in \\server-name\foldername it would be dissallowed.

I do not have it's location to hand but will find it and update this post

[edit]

Just had a thought, when you click open it should default to "My Documents" now ours are all redirected to thier home shares and if we select up on level it takes the to My Computer and then the desktop and no further. Are your My Docs folders redirected or not, that could be the issue.

[/edit]

Sounds strange to me. There is one setting that nags me here but im not sure if its relevant and that is something about connecting the user home directory to the root of the share or something along those lines.

Your definately not sharing the areas out individually? I have a drive letter mapped to them as well as my docs redirection which I assume you have?

Chris H - I have not got the Users directory shared i have the pupils indivudual folders shared. I have mapped there network drive

ICTNUT - Ok thanks alot

That would help me a lot

That must be it then my root share is called student$

@Faza:

How have you mapped that pupils home drives via GPO or scripted i.e. Bat file ot vbs...??

[edit]

I agree with ChrisH our root folder is Students$ which only the admins have access to and then within that we have year group folders (NOT SHARED) and within those you get the individual students folders themselves shared as studentname$ with admins having full access and only the required students have full access also.

[/edit]

ICTNUT - Through AD when i created the user

I have the same setup as ICT NUT so it must be using the "$" on the share that is the solution.

My problem is that i can still see the servers when i press up one level. I have not found the GPO setting to disable the UNC browsing.

I think 'disable network neighbourhood' is the setting.

Im having difficulty finding the GPO setting