Software that allows access to C Drive and Shares

[burgemaster]

Hi All,

 

Ive been looking at alternatives to "Garage Band" the mac music software....

 

All three recommended alternatives use their own "File Browsers" and even when a student is logged in, they have the ability to browse up a folder and browse the C drive files.

They can also see any hidden folders, or any Mapped network drives that are hidden.

 

1) Does anyone know a way around this?

2) Have I got permissions setup correctly? Im using GP to restrict and hide the C drive, these are:

"Prevent access to drives from My Computer" and

"Show only certain drives in My Computer"

 

They cannot edit anything or save to these locations, but within the application they can click "My documents" and then "Up a folder" and then see and browse any users "Doc and Set" folders.

 

Can anyone please help? Im guessing that the applications are loading as a system account and using that to browse the drives?

 

Magix Music Maker

MuTools

 

* as you can see from the screenshot, there is no access to "C:" by browsing to it, it is also not in My Computer. But still available in the application

Edited June 30, 2011 by burgemaster

[burgemaster]

70 views .... maybe even a breif heads-up on how you restrict/hide C drive?

 

Thanks in advance

[Arthur]

I'm guessing that the applications are loading as a system account and using that to browse the drives?

It's because they aren't using the standard Windows dialog boxes in their applications.

[mavhc]

Why does it matter if they can access C:?

[_Bob_]

This is an annoyance with some apps that don't use standard file browsing dialogs but as long as file permissions are set correctly it isn't a major security issue. They can see files but if ACL are set correctly they won't be able to modify.

[localzuk]

Why does it matter if they can access C:?

 

Its an unnecessary security risk.

[ChrisMiles]

You wont be able to do anything about this I'm afraid. The group policies only apply to explorer, other applications can query for files and directories without any restrictions.

[mavhc]

Its an unnecessary security risk.

It's an unnecessary obscurity risk

[Dos_Box]

I'm sure the more switched on pupils will be able exploit any obscurity they come across. They always have in the past. What if the file dialogue box also allows them to browse to UNC paths as well? The fact the application allows access to the root of a drive will almost surely indicate that it has the ability to navigate further.

[burgemaster]

Thanks for the replies...

 

permissions are set so they cannot modify anything in the C drive... But allowing the end users the ablity to snoop around in there, knowing the layouts, knowing the names of EXEs that are used to retrict them, giving any student who try and exploit the systems an edge. Would a bank mind if we were to able to check out the complete design plans for there building/vault/systems?

 

DOS BOX is also correct, we have 2 mapped hidden drives, one an applications share that they can browse. We also have a couple of weakly designed applications that need students to have modify access to certain install folders

 

BUT GOOD NEWS !!

I have downloaded the latest version of Magix Music Maker 17 and it has done away with its file manager and now uses the windows file system to load/save!

 

 

Thanks for the replies.