Windows 10 Search Bar Disable Run Command

[MattM31]

Hi All,

 

I've been struggling to lock down Windows 10 for a while I've managed to stop the Open File Location menu on start menu items as it opened a file explorer window to the server due to the redirection. My current issue is that users can type a UNC into the start menu search box and it allows them access to shared server folders such as net logon and sysvol which then need read access to. Has anyone found a way to stop to search box running commands and browsing the network via UNC.

 

I've already disable run on the start menu via group policy but it doesn't stop the search box issues.

 

Many thanks,

 

Matt,

[mavhc]

Why is people accessing sysvol/netlogon bad?

[MattM31]

Its more about the other shared folders on the server they can see when they type \\servername into the search box and hit enter.

[AJWhite1970]

I think from memory if you disable "run" as well as command prompt then you also disable being able to type UNC paths in the explorer bar

[MattM31]

Yep I've managed to enable that policy to stop the pupils typing a UNC into file explorer/internet explorer but annoyingly it still works in the windows 10 start menu search bar. It not a major issue it just means going through all the server share permissions or re-sharing them with a $ sign to hide them then adjusting all the GPO setting to change the UNCs for desktop background and other similar files it uses.

[mavhc]

Seems like it's a much better idea to secure the network rather than hiding things and hoping no one finds them

[MattM31]

Very true, its just a massive job, I only took over in September so I'm still finding shares and files scattered across the servers. Was just hoping for some sort of reg change to disable the search bar or something as a quick fix while I sort out all the TB's files and folders, half of which probably don't need keeping.