Doubleclick programs entry on start menu
From: James D. Stallard (james_at_LEAFGROVE.COM)
Date: 06/13/04
- Previous message: Nick FitzGerald: "[Full-Disclosure] MS web designers -- "What Security Initiative?""
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Sun, 13 Jun 2004 11:05:52 +0100 To: NTBUGTRAQ@LISTSERV.NTBUGTRAQ.COM
Folks
A client has asked this of me and I am looking for a little best practice
guidance:
We have a W2K/Terminal Server/Citrix policy implemented to restict users
from accessing the systemdrive. (M:)
The systemdrive is also hidden and not accessible because of this policy.
Eveything works fine BUT we discovered that when a user opens his START menu
and he/she doubleclicks on "Programs" the windows explorer opens
M:\Documents and Settings\%username%\Start Menu\Programs. From that point
the user can navigate up to the systemroot.
OS is Windows 2000
I don't believe that a policy exists in Windows 2000 that will affect this
behaviour.
Any thoughts around policies or NTFS rights that I can use to stop or
mitigate this?
Thanks in advance
Cheers
James D. Stallard
-----
NTBugtraq Editor's Note:
Want to reply to the person who sent this message? This list is configured such that just hitting reply is going to result in the message coming to the list, not to the individual who sent the message. This was done to help reduce the number of Out of Office messages posters received. So if you want to send a reply just to the poster, you''ll have to copy their email address out of the message and place it in your TO: field.
-----
- Previous message: Nick FitzGerald: "[Full-Disclosure] MS web designers -- "What Security Initiative?""
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
|
