Doubleclick programs entry on start menu

From: James D. Stallard (james_at_leafgrove.com)
Date: 06/11/04

  • Next message: Jordan Wiseman: "RE: Doubleclick programs entry on start menu" 
    To: <focus-ms@securityfocus.com>
Date: Fri, 11 Jun 2004 22:02:17 +0100

    Folks

    A client has asked this of me and I am looking for a little best practice
    guidance:

    We have a W2K/Terminal Server/Citrix policy implemented to restict users
    from accessing the systemdrive. (M:)

    The systemdrive is also hidden and not accessible because of this policy.

    Eveything works fine BUT we discovered that when a user opens his START menu
    and he/she doubleclicks on "Programs" the windows explorer opens
    M:\Documents and Settings\%username%\Start Menu\Programs. From that point
    the user can navigate up to the systemroot.

    OS is Windows 2000

    I don't believe that a policy exists in Windows 2000 that will affect this
    behaviour.

    Any thoughts around policies or NTFS rights that I can use to stop or
    mitigate this?

    Thanks in advance
    Cheers

    James D. Stallard

    ---------------------------------------------------------------------------
    ---------------------------------------------------------------------------

  • Next message: Jordan Wiseman: "RE: Doubleclick programs entry on start menu"

    Relevant Pages

    • RE: Doubleclick programs entry on start menu
      ... We have a W2K/Terminal Server/Citrix policy implemented to restict users ... menu and he/she doubleclicks on "Programs" the windows explorer opens ... point the user can navigate up to the systemroot. ...
      (Focus-Microsoft)
    • Doubleclick programs entry on start menu
      ... The systemdrive is also hidden and not accessible because of this policy. ... and he/she doubleclicks on "Programs" the windows explorer opens ... the user can navigate up to the systemroot. ...
      (NT-Bugtraq)
    • RE: Doubleclick programs entry on start menu
      ... There is an option in the group policy that my fix your issue: ... Mike Fetherston ... > the user can navigate up to the systemroot. ... > I don't believe that a policy exists in Windows 2000 that will affect ...
      (Focus-Microsoft)
    • Windows Shortcut Keys and "ALT+TAB" not working because of GPO
      ... We've got an issue with a machine policy which prohibits us of using Windows ... Deny access to this computer from the network Support_388945a0, ... Policy Setting ...
      (microsoft.public.de.german.windowsxp.gruppen.richtlinien)
    • Re: GP errors
      ... Then later shutdown second one and start the first one. ... machine (MTCCSAPROUTER) to the domain and those errors are not coming. ... The policy for which it is giving access denied error is the Default ... Windows cannot query for the list of Group Policy objects. ...
      (microsoft.public.windows.server.active_directory)
    • Quantcast