Users can acces c: from Adobe cc Encoder \Media Broswer

[Jaan]

Hi all,

 

We have no access to C: for our users. However i've been made aware that when opening Media Broswer from encoder user can access the c:.

 

Anybody else have this.

 

Not sure what i'm going to be able to do to prevent this.

 

Adobe CC

 

[mavhc]

Set permissions on the folders you don't want them to access, so they can't access them

[altecsole]

Hi all,

 

We have no access to C: for our users. However i've been made aware that when opening Media Broswer from encoder user can access the c:.

 

Anybody else have this.

 

Not sure what i'm going to be able to do to prevent this.

 

Adobe CC

 

[ATTACH=CONFIG]64283[/ATTACH]

 

Assuming that your users all access as standard users - does it matter if they can access the C: drive?

[Jaan]

Set permissions on the folders you don't want them to access, so they can't access them

 

That seems like a simple soluation to be fair!

 

If i remove the "students" ability to "read" c:\ won't that cause issues with programs and such opening? I think that i'm overthinking this and not seeing the forest because of the trees.... Normally our GPOs hide the C:\ away

 

Yes all our students are standard users, but Students being students will copy and paste the contents of a folder to their My docs folder just for the sake of it.

[mavhc]

There's a List Folder Contents permission you can deny I think, test it on one computer and see

[Jaan]

There's a List Folder Contents permission you can deny I think, test it on one computer and see

 

this removes read permisisons tho

[mavhc]

Shouldn't do, they're 2 different permissions.

 

Also read up on Bypass Traverse Checking

[Guest Guest]

Isn't there a GPO for "Prevent access to" rather than "Hide access to" (i.e within File Explorer) - or does this bypass this? I only have Adobe on Macs here so can't test but have always used "Prevent" rather than "Hide" when setting up File Explorer GPOs.

[Jaan]

Isn't there a GPO for "Prevent access to" rather than "Hide access to" (i.e within File Explorer) - or does this bypass this? I only have Adobe on Macs here so can't test but have always used "Prevent" rather than "Hide" when setting up File Explorer GPOs.

 

Yeah we have both, and also when accessing via unc paths.