Restrict "Search files and folders"

[sandfie]

Is it possible to restrict the "search files and folders" in a pupil profile so that only their user area and removable media are searched? We currently have no search because it is too open.

 

Windows Server 2003

Windows XP Pro SP2 workstations.

[GrumbleDook]

IIRC the search can only be restricted by the permissions they have to view things ... the easiest way of restricting this is by using GPOs to prevent being aboe to see the local drive, ACLs and share permissions to prevent folder listing for certain groups ... and cattle prods when they still try to break it.

 

However ... there are a few software applications that sulk when you start restricting being able to see things in different places ...

 

I remember seeing a very locked down systme though ... but someone had been doing some bits and pieces with the shell being used (eg explorer)

[NetworkGeezer]

Does it matter whether things are visible or not?

 

If you set up your NTFS permissions and software policies correctly then nothing much will be gained by a broad search.

[sandfie]

They cannot view the local C: drive, this is already restricted.

 

 

Sorry, our managed service provider has removed this ability and sighted security as the reason. Are you saying that once the drive is not visible it will not appear in Search? and not deliver results from these drives if a search is done on my Computer?

[GrumbleDook]

Unfortunately there are ways around it due to the way that windows is built ... even if the C: drive is restricted it is possible to create a shortcut and still access it.

 

It sucks, but that is windows for you.