OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
RE: Doubleclick programs entry on start menu

From: Jordan Wiseman (Jordan_WisemanValleymed.org)
Date: Mon Jun 14 2004 - 13:34:28 CDT


Well... Not really change the double-click itself.

Let me explaint...Just like when a user clicks on a file, like a Word
document, Windows looks up what application to run in the registry. You
can tell windows that instead of opening up an explorer window for a
folder, you can run another application..or nothing.

Check out this link:

http://www.wintrouble.net/discus/messages/62/2129.html?979601014

Jordan

-----Original Message-----
From: Joshua Vince [mailto:Josh.Vincebcgsys.com]
Sent: Monday, June 14, 2004 11:21 AM
To: Jordan Wiseman; focus-mssecurityfocus.com
Subject: RE: Doubleclick programs entry on start menu

How do you change the default behavior for what Explorer will try to do
when a user double clicks?

        -----Original Message-----
        From: Jordan Wiseman [mailto:Jordan_WisemanValleymed.org]
        Sent: Mon 6/14/2004 11:56 AM
        To: James D. Stallard; focus-mssecurityfocus.com
        Cc:
        Subject: RE: Doubleclick programs entry on start menu
        
        

        Well,
        
        There are a few tricks we used to use to keep "eager" users from
doing
        similar things on public workstations. Basically, you can
change the
        default behavior for what Explorer will try to do when a user
double
        clicks (and the contents of the context menu when a user
right-clicks)
        on a folder. Just like adding custom file associations.
        
        However, the question should be asked first (because of how
these could
        affect the user interface) are you publishing desktops to your
users, or
        just seamless applications? In other words...do they need to
browse
        folders outside the normal common dialogs?
        
        Jordan
        
        
        
        -----Original Message-----
        From: James D. Stallard [mailto:jamesleafgrove.com]
        Sent: Friday, June 11, 2004 2:02 PM
        To: focus-mssecurityfocus.com
        Subject: Doubleclick programs entry on start menu
        
        Folks
        
        A client has asked this of me and I am looking for a little best
        practice
        guidance:
        
        We have a W2K/Terminal Server/Citrix policy implemented to
restict users
        from accessing the systemdrive. (M:)
        
        The systemdrive is also hidden and not accessible because of
this
        policy.
        
        Eveything works fine BUT we discovered that when a user opens
his START
        menu and he/she doubleclicks on "Programs" the windows explorer
opens
        M:\Documents and Settings\%username%\Start Menu\Programs. From
that
        point the user can navigate up to the systemroot.
        
        OS is Windows 2000
        
        I don't believe that a policy exists in Windows 2000 that will
affect
        this behaviour.
        
        Any thoughts around policies or NTFS rights that I can use to
stop or
        mitigate this?
        
        Thanks in advance
        Cheers
        
        James D. Stallard
        
        
        
        
------------------------------------------------------------------------
        ---
        
------------------------------------------------------------------------
        ---
        
        
        
        
        
------------------------------------------------------------------------
---
        
------------------------------------------------------------------------
---
        
        

---------------------------------------------------------------------------
---------------------------------------------------------------------------