Users saving to computer

[alunmjones]

I have found a strange fault today, users are able to save to computer, i don't mean the c:\ drive, i mean actual computer where drives and network drives are hosted, see attached image

 

i don't know where to start looking to prevent this.

 

any help appreciated.

 

Thank You

[Grey-gear]

Check the permissions to see if it has been someone shared by someone. but have to say that's weird

[Arreks]

I can't say I've ever seen that before.. how weird. Have you been able to replicate it or was it a one-off event from a student? if it's only on one machine then right click > properties just to double check what the location 'actually' is.

[synaesthesia]

I've seen and fixed this on a CC4 network - bear with me whilst I remember how I did it!

[synaesthesia]

This is a "feature" (bug) - although you can't drag and drop anything to that area, you can save there from any Office (and probably other) applications by clicking on "This PC" (or my computer/my pc depending on your OS) and hitting save in that application.

 

You can fix this by restricting access to the following folder:

 

C:\Users\%username%\AppData\Roaming\Microsoft\Windows\Network Shortcuts

[alunmjones]

your right, that is where they go, im trying everything i can think of to block the abuility of people to save to that location, i would use bitlocker but i don't have windows 7 ent on the system at the moment.

 

im trying to create a script to change permissions but im having problems with UAC blocking the change, i cant find an easy wayt to change permissions on a user by user basis. i know how to do it on the machine itself but that does not help here.

[alunmjones]

i have found a way of making this work now, had to run a few commands at login.

 

here they are, replace domain with your domain.

 

 

icacls "%userprofile%\appdata\Roaming\Microsoft\Windows\Network Shortcuts" /inheritance:d /c
icacls "%userprofile%\appdata\Roaming\Microsoft\Windows\Network Shortcuts" /remove domain\%username% /t
icacls "%userprofile%\appdata\Roaming\Microsoft\Windows\Network Shortcuts" /grant:r domain\%username%:(OI)(CI)RX /t