Stop Users from Entering My Network Places

[EduTech]

Hi All,

 

I've been asked by a school to look into preventing the students from accessing "My Network Places" as apparently what they are doing is opening up 'My Computer' and go up a level or two and then they are able to look at Network Places and then view the Servers and Desktops on the Network.

 

They cannot access any shares etc. via that way but can access the SysVol folder... *not sure if that should be a concern?*

 

Anyway, I've not had to hunt down things like this for a while and have forgotten where the settings are in GPO to lock down such, can anyone point me in the right direction?

 

I also need to stop them from Running .EXE Files like Portable Google Chrome etc. but they need to be allowed to run certain .EXE Files... I know there is a lot on here about that but if anyone has a working solution on this shout up also please

 

Many Thanks..

 

James.

 

DC: Windows Server 2008

Edited February 9, 2011 by EduTech

[Michael]

There are several policies you should look at:

 

User Config > Admin Templates > Desktop > Hide My Network Places icon on desktop - Enabled

 

User Config > Admin Templates > Windows Components > Windows Explorer > No "Computers Near Me" in My Network Places - Enabled

 

User Config > Admin Templates > Windows Components > Windows Explorer > No "Entire Network" in My Network Places - Enabled

 

That should do the trick

 

As for restricting certain .exe's have a look at Software Restriction Policies.

[EduTech]

Thanks Mate! I'll check them out they do ring a bell now. just never had the time today to go searching through Group Policy's lol!

 

James.