OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: Re: Hide Drives does not work with OUTLOOK 98.
From: Alderman, Sean (SAldermanFREITRATER.COM)
Date: Wed Mar 22 2000 - 16:51:23 CST

I use similar restrictions on Windows 9X policies. You may also notice that
any 16bit File Open API will allow you to see all local and mapped drives.

I would suggest checking the other File Open dialogs in apps like Office and
maybe some 32bit non MS apps. The 16bit dialog does not allow you to
perform edit ops like the 32bit dialog does. I have not noticed any issues
with this in my Office 97 installations.

What you are seeing implies that Outlook98's attach dialog is not using
Explorer to browse and build it's file listing...I believe that is why the
16bit dialogs act similarly.

-----Original Message-----
From: jhw1970HOTMAIL.COM [mailto:jhw1970HOTMAIL.COM]
Sent: Wednesday, March 22, 2000 10:10 AM
To: BUGTRAQSECURITYFOCUS.COM
Subject: Hide Drives does not work with OUTLOOK 98.

Using the techniques described in the KB (Q242092 - How to:
Use System Policies to Hide Specific Drives) I've been able
successfully hide drives located in a stand-alone WinNT 4.0
Workstation. The default user is only allowed to view
their own personal drive/folders. This process works fine
when viewing directories using Win Explorer, My Computer,
and the DOS prompt.

One problem. I just found that a user can view the hidden
drives when attaching a file using OUTLOOK 98. Using this
technique the users is able to copy, cut, paste, or delete
files on the hidden drives.

Any suggestions?

-- JHW