C
Craig Wilson
I am Network Manager for a Secondary School in the UK, and we use Office
2003 for the pupils to do their ICT coursework, and have encountered a
worrying problem that I can find no resolution for at present.
Office has been configured via the ORK to "lock" users to their Home Drives
when opening or saving files. However in the last few weeks I have been
getting reports of pupils accessing other pupils work via Office 2003.
When I investigated this further I found that what they were doing was using
the "Insert Picture From File" and part of the Mail Marge wizard to do this.
When they browse for a file, their home folder is displayed as a UNC and as
a result they can move up and down the network at will and can even save
work in other users areas.
I am wondering if there is something I have missed - most likely it could be
NTFS permissions but I cant see what's wrong with them at present.
Home drives are mapped to H: with the following UNC -
\\server\Home$\Year_group\username
where Home$ is the only share (everyone Full Control), and username's NTFS
permissions are "Domain Admins" and the appropriate username, along with
IIRC, SYSTEM, CREATOR OWNER, and the Local (the server) Admin.
I suspect the problem could be the share permissions, but thought that NTFS
permissions override share permissions??
Any help would be appreciated
Regards,
Craig Wilson
ICT Network Manager
Moorside High School
Manchester, UK
2003 for the pupils to do their ICT coursework, and have encountered a
worrying problem that I can find no resolution for at present.
Office has been configured via the ORK to "lock" users to their Home Drives
when opening or saving files. However in the last few weeks I have been
getting reports of pupils accessing other pupils work via Office 2003.
When I investigated this further I found that what they were doing was using
the "Insert Picture From File" and part of the Mail Marge wizard to do this.
When they browse for a file, their home folder is displayed as a UNC and as
a result they can move up and down the network at will and can even save
work in other users areas.
I am wondering if there is something I have missed - most likely it could be
NTFS permissions but I cant see what's wrong with them at present.
Home drives are mapped to H: with the following UNC -
\\server\Home$\Year_group\username
where Home$ is the only share (everyone Full Control), and username's NTFS
permissions are "Domain Admins" and the appropriate username, along with
IIRC, SYSTEM, CREATOR OWNER, and the Local (the server) Admin.
I suspect the problem could be the share permissions, but thought that NTFS
permissions override share permissions??
Any help would be appreciated
Regards,
Craig Wilson
ICT Network Manager
Moorside High School
Manchester, UK