remove network browsing

[markman]

Hi, In Windows 7 our kids are accessing everyones home directories through Network in windows explorer. Now I know there has to be a key in group policy to hide this, but can I find it; hell no. does anyone know which one does this please?

[Guest TheLibrarian]

You should address the share / NTFS issue that allow them to browse the home directories.

[danrhodes]

You should address the share / NTFS issue that allow them to browse the home directories.

 

Correct, sounds to me like you have no permissions set of the home folders, consider using CACLS to set the perms on the folder from CMD.

 

I find it quicker and easier to export a list of usernames from Sims.net then create a script in Excel using concatenate then just copy and paste into notepad, save a batch file and let it rip.

 

For reference use http://ss64.com/nt/cacls.html

 

Example:

 

CACLS D:\Users\Student's\Year7\JSmith1234 /E /G JSmith1234:C

 

D

[markman]

Hi, cheers for the help. It was partly an inheritence issue. They can still see them but cant doing anything in there.

[tbd]

Hi, Has anyone managed to find a solution to this? I was hoping we could apply a group policy to these computers so that the 'Network' didnt appear on the left pane in windows explorer. I cant find any information about this, but it must be possible...

 

Any help would be appreciated!

 

Thanks,

TBD

[CyberNerd]

Has anyone managed to find a solution to this?

 

 

TBD

 

The solution is to address the permissions on the share, not try to cludge a fix on the client.

[irsprint84]

The solution is to address the permissions on the share, not try to cludge a fix on the client.

 

Well my permissions were fine and locked down but bug seemed to allow them all over the place! I just reg hack client to remove windows navigation bar

[bio]

correct NTFS permissions + correct Share permissions + Access based enumeration will do the trick

 

bio..

[Stuart_C]

On each Win 7 Machine, disable Network Discovery (Control Panel\All Control Panel Items\Network and Sharing Center\Advanced sharing settings) stops them browsing the network.

 

Re shares. Simply set your root permissions (e.g d:\users) to something like System+Domain admin full control and leave inherriance on. Then use DanRhodes's instructions (or equivilent)to set the permissons on eace user folder to only that user. Job done. Works fine for me.