[1809, ou] Blocking Access to UNC Paths in File explorer / Search box

[ItsOnlyAniPad]

Hello all,

Currently in the process of trying to lock down our windows 10 1809 image before we start mass deploying to classrooms, the major stumbling block I have encountered at the moment is preventing pupils and to some extent teachers been able to browse UNC paths of servers which contain files that they shouldn't be accessing.

 

Does anyone have a working solution for this? Is there somewhere that I can just put a list of server names etc that shouldn't be accessible?

 

Thanks

[mavhc]

Why can they open shares they don't have permission to open? Fix the permissions.

[Oaktech]

Fix the permissions, turn ABE on.

 

Not being able to navigate UNC paths is a PITA, particularly for staff.

 

If you Really must turn it off, then:

 

User Configuration - Administrative Templates - Start Menu and Taskbar - Remove Run menu from Start Menu

 

Option 3.

 

But I really don't recommend it as it can have unforeseen consequences such as programs run from network locations failing to work correctly.

[mavhc]

ABE?

 

..

[Oaktech]

Access Based Enumeration.

 

If they don't have access to it, they won't even see it exists.