[1903, au] Search Box & Type To Search

[Samm]

We are currently sorting out our GPOs ready for our Windows 10 migration. We are having some issues with the search that is build into the taskbar/start menu in 1903. It is allowing a user to type in c:\ and bypass the illegal drive GPO and they can also type in UNC paths and bypass our policy that blocks browsing UNC paths.

 

We have tried hiding the search and then prevent right click on the task bar which prevents the students from hiding it. The issue with this is when you have the start menu open and start typing it brings the search box back up.

I have also tried turning off Indexing but the search can still run c:\ and UNC paths

 

 

Has anyone had any luck with completely disabling the search or preventing access to C or UNC paths?

 

-Sam

[Oaktech]

We gave up with the UNC thing and just turned on ABE so if it's not yours, you can't see it.

[Samm]

Thanks, will get ABE turned on. Did you manage to stop them being able to type c:\ ?

[Oaktech]

I think so, I'll check. I've done so many reg hacks I've lost track. Bad IT manager not documenting stuff!

[fiza]

How does ABE work for shared resources? Never used it before.

[Samm]

We have found a solution to this, we have used on Impero Policy to close any windows that has the title of "(c:)" and this has resolved the issue for the moment. Not sure what else this may break but on initial testing looks good

[CHiLL]

We have the follwing GPO set for students, which disables their access to C:\

User Configuration > Policies > Administrative Templates > Windows Components > File Explorer > Hide these specified drives in My Computer: Enabled > Restrict A, B and C drives only

User Configuration > Policies > Administrative Templates > Windows Components > File Explorer > Prevent access to drives from My Computer: Enabled > Restrict A, B and C drives only

 

On our 1903 deployment as a student - if they type C:\ into the Start search bar, it loads File Explorer and displays a dialogue box stating that "This operation has been cancelled due to restrictions in effect on this computer. Please contact your system administrator.". If I try and access a UNC path via the address bar in File Explorer, it displays another dialogue box stating "Accessing the resource "\\server" has been disallowed.".

Edited September 26, 2019 by CHiLL