From: Matt Mercer (mattmpyramidcorporation.com)
Date: Mon Jun 14 2004 - 10:46:43 CDT

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

James,

The group policy for users running a specific app on our W2K terminal
server is set to redirect the Start menu to a local share called
\\servername\usergroup_start$. Double-clicking on their "Programs"
folder will only give them a list of what they can already see, and the
ability to navigate up to visible shares on the server or to the Network
Neighborhood (undesirable but seemingly harmless with the draconian
policies in place).

In concert with additional policy restrictions (say, to prevent users
from punching C: into the address bar present upon double-clicking),
this keeps anyone from fooling around in the server's directories.

I hope this technique can help you out!

-matt

<snip>
> Eveything works fine BUT we discovered that when a user opens his START menu
> and he/she doubleclicks on "Programs" the windows explorer opens
> M:\Documents and Settings\%username%\Start Menu\Programs. From that point
> the user can navigate up to the systemroot.
</snip>

---------------------------------------------------------------------------
---------------------------------------------------------------------------

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]