Windows Search 4.0

[mrforgetful]

Oh dear oh dear.

 

I found this and thought it was such an improvement on WDS3.1, so much so I thought it was definately going in the next image.

 

Well I was just coming to take the image and thought...I wonder...

 

So, I log in with my test Pupil account.

Choose to search for 'Key Stage' and change the location to P:\Staff, which as the path suggests is the staff area that students are not allowed to access.

 

Anyway off it went, took a while but eventually returned a nice long list of files, which I can then preview or open as I like!

 

Removal starting now.

[contink]

Thanks for that heads up... saving me a job removing that after the damage has been done

[mrforgetful]

It is strange, because if I remember correctly, if I just searched P:\ then folders the account had no rights to weren't searched, only if I chose the folder itself.

[cookie_monster]

What account is the WDS process running under?

 

It should not be able to ignore NTFS permissions over a network.

[mrforgetful]

I don't know on the test machine as it's uninstalled now and imaging - I'll reinstall and look tomorrow.

 

As for my the Windows Search service on my machine (which I've not changed from default) it is running as 'Local System account' and cannot interact with the desktop.

[cookie_monster]

Ok, second question for when you try again, why is P:\Staff mapped if the student account shouldn't have access to it?

[mrforgetful]

Our public drive is P:\ which gets mapped for everyone.

 

All information people want to share is stored on this one mapped drive.

 

Staff is a folder on P:\ to which students do not have access rights, but it can still be seen.

 

Just as within the Staff Folder there is Geography Staff to which only Geography Staff have access but any Staff can see it listed.

[cookie_monster]

Ahh i see we tend to have seperate staff and pupil shares so they can't even see staff folders.

 

Are you using 2003 server? If so you can turn on Access Based Enumeration and this hides folders that a user has no access too.