Re: Locking down drive access
- From: Cláudio Rodrigues [MVP] <CR@xxxxxxxxxxxxxxxxxxx>
- Date: Sat, 4 Nov 2006 14:09:22 -0500
One thing is hiding the drive. When you say the user has full access if going through Word do you mean if you set a certain subfolder to Read Only (NTFS permission) he is able to write to that folder? I do not think that is the case.
I think you mean you are hiding the drive but through Word he can see it. If that is the case, welcome to Office holes in a TS environment.
The best you can do is use NTFS permissions everywhere to make sure every single folder is locked/protected from the users.
--
Cláudio Rodrigues
CEO, TSFactory Inc.
Microsoft MVP
Windows Server - Terminal Services
http://www.tsfactory.com
"Peter W" <PeterW@xxxxxxxxxxxxx> wrote in message news:%23DcdcSBAHHA.4864@xxxxxxxxxxxxxxxxxxxxxxx
Hi
I am in the process of putting together a terminal server for a client with 8 PC's located in 4 offices around the state.
I am happy with the way it's coming together except for one issue.
One user is to have access to one data folder only. This lives within d:\data folder as d:\data\user and shared.
I have mapped to network drive to \\server\user mapped as a p: drive.
I have customised the system.adm to hide all drives except the p drive.
I have set NTFS permissions so that the user only has permission to this folder and none other on the d: drive.
When testing as that user, within windows explorer if I type "d:\" in the address bar I get a "you have no access" message.
But if I open MS Word or Excel and go to "open file" the type "d:\" into the "file name" box I get full access to the drive and can open restricted files. Even though NTFS permissions are not allowed for that user.
Can anyone please help? Is this possible to fix or am I best to hope the user doesn't have the smarts to try and access other data?
Peterw
.
- References:
- Locking down drive access
- From: Peter W
- Locking down drive access
- Prev by Date: Re: Terminal Services Automatically Maximizes
- Next by Date: Newbie TS questions
- Previous by thread: Locking down drive access
- Next by thread: Newbie TS questions
- Index(es):
Relevant Pages
|
