Re: Lock users out of Network browsing

From: Kent W. England [MVP] (kwe@mvps.org)
Date: 11/17/02 

From: "Kent W. England [MVP]" <kwe@mvps.org>
Date: Sun, 17 Nov 2002 12:28:19 -0800

This is one of the limitations of Group Policy. For example, I can
remove the Windows Update icon from the Start Menu but I cannot stop a
user from navigating to the Windows Update site. I can only prevent the
user from downloading WU by making that user a member of the Users group
(XP Limited Account). I can disable the Control Panels, but I can't stop
a user from issuing a control panel command line (unless I also disable
the Run command on the start menu). Even then, there is a simple way to
execute "cmd.exe" by browsing with Windows Explorer to the file or
searching for the file.

GPOs are no substitute for access permissions. They are more "security
through obscurity" which is no security. 

-- 
Kent W. England, MS MVP for Windows XP
(Please respond only in the newsgroup)
"Gary Newport" <gary.newport@ntlworld.com> wrote in message 
news:eDnJvvljCHA.1784@tkmsftngp11...
> Use GPOs. Under computer>systems>network you can hide the My Network 
> icon
> and also restrict the drives a user can see.
>
> I can say however that this does not seem to stop them browsing 
> through IE6
> and using the file:// command. I have this scenario since my Intranet 
> is
> through such a link and gives the user the ability to browse the 
> entire
> network. User rights stop them viewing but not browsing!
> "Kent W. England [MVP]" <kwe@mvps.org> wrote in message
> news:eeqpdx5iCHA.2748@tkmsftngp11...
> > Hide the Network Neighborhood Icon
> > http://www.winguides.com/registry/display.php/150/
> >
> > --
> > Kent W. England, MS MVP for Windows XP
> > (Please respond only in the newsgroup)
> >
> >
> > "Scott Darrington" <SDarrington@cityu.edu> wrote in
> > message news:0f5701c28b30$559a45a0$39ef2ecf@TKMSFTNGXA08...
> >
> > > How can I lock users out of browsing the network in a lab
> > > scenario?  XP Pro O/S
> >
>
>

Relevant Pages

  • Re: Access Denied
    ... In the Group Policy snap-in, ... Select "Windows Update" ... > Network policy settings prevent you from using Windows Update to download> and install updates on your computer. ... > If you believe you have received this message in error, please check with> your system administrator. ...
    (microsoft.public.windowsupdate)
  • Re: HELP - cannot install updates on users computers
    ... the McAfee Firewall. ... It would seem the lack of a Windows Update choice in IR Tools menu, ... message that says the network admin has blocked this, ... However, if you want to take a look in group policy, the section you'd be ...
    (microsoft.public.windows.server.sbs)
  • Re: Local area connection 2 unplugged
    ... >> network cables when nothing was wrong, ... This icon is my broadband icon, ... >I believe you may find that the icon with yellow downloading arrows is perhaps Windows Update attempting to download critical updates. ...
    (microsoft.public.windowsxp.general)
  • Group Policy Application problems
    ... I am a fairly new network admin and i am trying to use Group Policy on our ... The SUS server is set up and working properly. ... apply those settings to a computer and Windows Update will work as well. ...
    (microsoft.public.win2000.active_directory)
  • Group Policy Application problems
    ... I am a fairly new network admin and i am trying to use Group Policy on our ... The SUS server is set up and working properly. ... apply those settings to a computer and Windows Update will work as well. ...
    (microsoft.public.win2000.active_directory)