Office 2k3 "Insert Image from File" and "Mail Merge" prob

[Gatt]

OK heres the score

 

Over summer I created an MST for Office 2003, using the ORK, to force users to their Home Drive when saving/opening files, etc

I spent ages going through every option I could find and forcing it to Drive H: so that they cannot view the rest of the UNC path - just the drive letter.

 

However, today I got a report that kids are yet again accessing others files.

 

The way they are doing it is to Insert a Picture from file or in the Mail Merge Wizard.. there are probably more but I havent found them all yet

 

This happens in all Office 2003 Products

 

Has anyone else encountered this?

And more importantly - is there a fix??

[ChrisH]

What else are they getting into exactly?

[Gatt]

Ok setup is:

 

Home Drive = H:

UNC path = \\server\home$\year xx\username

 

Used the ORK and CHROOT'd them all to H:\ - worked fine till today when I noticed one of the little darlings with the following in the dropdown box:

 

"Network Places\server\home$\year xx\username"

 

Logged on as a test user and went to insert - picture - from file - and on the dialog box clicked "up" - I went from the home folder to year xx - where I could then browse AND modify any other users work

went up to home$ - into another year group - and did the same again to another user

 

Will try get a screenshot of the problem tomorrow if i can

 

This is a serious problem and I think i'll need to speak to M$ tomorrow about it

[NetworkGeezer]

The permissions should be set so that only a given user, the SYSTEM account and Domain Admins can access a folder.

 

Seeing someone else's folders is not too bad if the student can't get into it.

[Gatt]

That's how its setup on my system - but will double check though...

[NetworkGeezer]

Make sure that Everyone isn't listed as having full rights over the folder tree.

[ChrisH]

There must be any issue with your permissions somewhere as I have a similar setup and they cant get to any of that stuff.