Network Security Holes

  • Thread starter Thread starter Mark
  • Start date Start date
M

Mark

Good Afternoon,

I have just spent the better part of the day locking down
a demo user's access to anything sensitive on the local
computer and network shared folders. I have had success
in every respect meaning that I have removed every way a
user could get at the local hard drives through My
Computer, Cmd Prompt, Windows Explorer, and Internet
Explorer. But of course there is still a hole. In order
for that demo user to properly perform a presentation,
that user has to have access to a part of the local
harddrive. So I hid the two harddrives that are on the
computer and restricted access to the D: but had to allow
access on C: since the user has to save data at times.
However, since the user is allowed to create documents and
save them on the local harddrive, there is a way to get
around the security. If you were to open up notepad, Go
to File->Save and type in c: while prompted to enter in
the file name you wish to save the file as and then click
the up arrow button at the top of the message box, you are
given instant access to the c:. Also, you can navigate
the network to known servers. For example, I went to
\\server1 with no problem. Is there a way for me to lock
down the local computer through Global Policies even
more. Thanks.

Mark
 
If you NTFS permissions they may be able to see the disk but should be
unable to write to any areas you don't want then to write to.
 
Back
Top