OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Doubleclick programs entry on start menu

From: James D. Stallard (jamesleafgrove.com)
Date: Fri Jun 11 2004 - 16:02:17 CDT

Folks

A client has asked this of me and I am looking for a little best practice
guidance:

We have a W2K/Terminal Server/Citrix policy implemented to restict users
from accessing the systemdrive. (M:)

The systemdrive is also hidden and not accessible because of this policy.

Eveything works fine BUT we discovered that when a user opens his START menu
and he/she doubleclicks on "Programs" the windows explorer opens
M:\Documents and Settings\%username%\Start Menu\Programs. From that point
the user can navigate up to the systemroot.

OS is Windows 2000

I don't believe that a policy exists in Windows 2000 that will affect this
behaviour.

Any thoughts around policies or NTFS rights that I can use to stop or
mitigate this?

Thanks in advance
Cheers

James D. Stallard

---------------------------------------------------------------------------
---------------------------------------------------------------------------