Re: Start Menu Redirect Security Flaw

From: Steven L Umbach (n9rou_at_nospam-comcast.net)
Date: 03/01/05 

Date: Mon, 28 Feb 2005 18:20:10 -0600

You might want to post in the setup_deployment newsgroup. What you describe
is not a security flaw. There are many ways for a user to browse a network
or drive such as right clicking the desktop to create a new shortcut and
then browsing to it as an example. Much of Group Policy simply hides access
to the less determined user or the idle curious. Bottom line is that you
must use share and ntfs permissions as the ultimate barrier to a user's
access to any resource. Ipsec policies are also a more advanced method to
prevent access at the computer level. --- Steve

"kdephillips" <kdephillips@discussions.microsoft.com> wrote in message
news:69D49FE4-CDDE-4E28-AA32-BC1EA2381BC1@microsoft.com...
>I am trying to lock down some public workstation and I have discovered a
>hole
> that I can't seem to fix. I am redirecting the start menu to an empty
> folder
> on a server so no programs can be found under the user's star menu but if
> the
> user double clicks the program folder it opens up windows explorer and
> lets
> them browse to things like my network places, etc. I know I can further
> lock
> down my network places via the GPO but I was hoping there was a setting
> that
> would prevent anyone from double clicking the programs folder off the
> start
> menu and launching windows explorer. Any ideas?
>
> Thanks
>

Relevant Pages

  • Start Menu Redirect Security Flaw
    ... I am trying to lock down some public workstation and I have discovered a hole ... user double clicks the program folder it opens up windows explorer and lets ... them browse to things like my network places, ...
    (microsoft.public.windows.server.security)
  • GPO: Start Menu Security Hole
    ... I am trying to lock down some public workstation and I have discovered a hole ... the user double clicks the program folder it opens up windows explorer and ... lets them browse to things like my network places, ... start menu and launching windows explorer. ...
    (microsoft.public.windows.server.security)
  • Re: Want XP Pro file shares accessible on net when computer locked
    ... to lock out network access as well as local. ... machine corresponding to the various network client PC's. ... gaining access to the XP Pro server via the guest account and authenticating ... >>accounts over the net? ...
    (microsoft.public.windowsxp.network_web)
  • xp home networking solution :)
    ... in any way shape or form through windows explorer. ... which prohibits Guest access across the LAN. ... You might not have permission to use this> network resource. ...
    (microsoft.public.windowsxp.network_web)
  • Re: Large file copy locks up SBS 2003
    ... While reviewing the System event logs (again after the second lock up), ... The article recommends applying SBS ... When you copy the files to a network shared place, ... > Microsoft CSS Online Newsgroup Support ...
    (microsoft.public.windows.server.sbs)