Windows 7 - Network

[lafleur1977]

Hello,

 

I am currently testing Windows 7 to roll out and have got GPO's configured pretty much how I want. One part I cannot change is the Network area on Windows 7. I have managed to hide it via a custom adm template but users can still access it in some places such as a unc path and this allows them access to every computer and their shares. Is there a way to disable the network area?

 

Thanks

Edited May 14, 2012 by lafleur1977

[RJohnson91]

+1

 

We are also having this problem, we havn't found a way to close the 'network' side to this, but we have placed permissions on all folders and computer in the network, so students get an error if they try to open any server folders e.t.c

 

Ryan

[Dos_Box]

What server version are you using?

[lafleur1977]

Yeah our permissions mostly prevent them from accessing files and shares but there are some such as netlogon that they can get into. If it is possible it would be great to be able to stop them from accessing the network. We are using windows server 2008.

 

Thanks

[cpjitservices]

I remember in XP and 2003 you could completely lockout network access - so even if someone did get into the "Network" folder they couldnt see anything! Doesn't seem to be the case with Server 2008 / Win 7.

[apeo]

Have a look at this:

 

http://www.edugeek.net/forums/windows-7/42683-remove-network-navigation-pane.html

 

We use GPP to do the reg hack.

 

Also users cant use UNC path in address bar:

 

http://technet.microsoft.com/en-us/library/cc940457.aspx

Edited May 15, 2012 by apeo

[lafleur1977]

Have a look at this:

 

http://www.edugeek.net/forums/windows-7/42683-remove-network-navigation-pane.html

 

We use GPP to do the reg hack.

 

Also users cant use UNC path in address bar:

 

Remove Run menu from Start Menu

 

I have been able to remove the network icon from the start menu and navigation panel okay but users can still access network via the address bar for some unc paths. The article you linked to goes to disabled the run command. If there is a way of hiding or disabling the address bar that would be great.

 

Thanks

[apeo]

By disabling Run, you disable running unc paths in the address bar too. This works well for us we dont want to run either but I assume you want them to have the Run box?

 

Im not sure its possible to disable the address bar in Windows Explorer in Windows 7.

[adhutton]

I have been able to remove the network icon from the start menu and navigation panel okay but users can still access network via the address bar for some unc paths. The article you linked to goes to disabled the run command. If there is a way of hiding or disabling the address bar that would be great.

 

Thanks

 

Did you find a solution for this? - we are having the same problem.....

 

Andrew

[lafleur1977]

Did you find a solution for this? - we are having the same problem.....

 

Andrew

 

Unfortunately not. I have managed to hide the network icon from the start menu and also from windows explorer (using a custom adm template) but not via the address bar. I am just going to leave it because as long as permissions are correct on the network users shouldn't be able to get into anything they shouldn't be able to.

 

Thanks

[adhutton]

Unfortunately not. I have managed to hide the network icon from the start menu and also from windows explorer (using a custom adm template) but not via the address bar. I am just going to leave it because as long as permissions are correct on the network users shouldn't be able to get into anything they shouldn't be able to.

 

Thanks

 

Many thanks. I think we are at about the same point as you.

 

I haven't managed to find a way of blocking network browsing via address bar. Users cannot get into anything they shouldn't, but it worries me just in case we add something to the network in the future and maybe forget to tie-down the permissions as quickly as we should then they could potentially cause problems. I would much rather network browsing were hidden. I cannot believe how MS have dropped the ball so badly on this one!

 

Cheers_ Andrew

[Roberto]

I cannot believe how MS have dropped the ball so badly on this one!

 

I suspect, because they don't think they have. Fancy tricks to hide browsing from explorer give the illusion of security, but you still need to apply correct permissions to shares to ensure they actually are safe, at which point hiding their existence becomes moot. I know other people think and work differently and that's fine too but I'm kinda with them on this one.

[Geoff]

I am not a fan of this. You've added a lot of complexity to your GPOs for very little real benefit. What's so wrong with just setting the network share permissions right in the first place?

[lafleur1977]

I am not a fan of this. You've added a lot of complexity to your GPOs for very little real benefit. What's so wrong with just setting the network share permissions right in the first place?

 

I don't think hiding network from the start menu and adding in small custom adm template to hide network from windows explorer is complex. Our network share permissions are set correctly too but users, and particularly students, mess about alot so for me it is important to hide as well as prevent access.

[PiqueABoo]

Me neither... if anything is going to tell a user to go away when they click it then I want it disappeared wherever possible to avoid unecessary user frustration/confusion. If you don't then there is far too much "Access denied.." "Your Administrator has disallowed..." for my liking.

[Geoff]

I don't discourage my users from poking and prodding. Granted I'm not in a school environment at the moment. But still, aren't they there to learn? OTOH if you don't like the way Windows UI handles the situation, maybe you should suggest a better way to handle it to Microsoft?

[morganw]

I think they have found a way. No network browsing buttons in the Metro UI. No useful buttons at all really.

[adhutton]

I don't think hiding network from the start menu and adding in small custom adm template to hide network from windows explorer is complex. Our network share permissions are set correctly too but users, and particularly students, mess about alot so for me it is important to hide as well as prevent access.

 

I completely agree

 

Andrew

[cubefred14]

try using win bubble tweaking tool>> been using it this wil solve your problem>> their is an option there where network propeties access will be block and but still network icon visible in your taskbar..

 

hope this help,,