Restrict MyComputer??

Server question from a high school teacher:
How can I advise my techs to create permissions so that Start> MyComputer will ONLY take the student into specific folders on the server?
Why? To my surprise, this year my students can no longer access or even see My Computer. Hence, they are blocked from the folders where they retrieve and deposit their class work. I need to get their access back to these server based folders WITHOUT offering them entry ways into sensitive areas that the tech wants to protect.

 

"pruez" <pruez.3y2trs@news.home.local> wrote in message
newsruez.3y2trs@news.home.local...<!--coloro:blue--><span style="color:blue <!--/coloro-->
>
> Server question from a high school teacher:
> How can I advise my techs to create permissions so that Start>
> MyComputer will ONLY take the student into specific folders on the
> server?
> Why? To my surprise, this year my students can no longer access or even
> see My Computer. Hence, they are blocked from the folders where they
> retrieve and deposit their class work. I need to get their access back
> to these server based folders WITHOUT offering them entry ways into
> sensitive areas that the tech wants to protect.
><!--colorc--><!--/colorc-->

Mhm. Sorry to say this but if your server administrators are unable to set
appropriate share or folder permissions then you should either let them
attend an appropriate training course or replace them by competent people.
Setting permissions is basic stuff for a server admin.

 

Pegasus [MVP] <news@microsoft.com> wrote:<!--coloro:blue--><span style="color:blue <!--/coloro-->
> "pruez" <pruez.3y2trs@news.home.local> wrote in message
> newsruez.3y2trs@news.home.local...<!--coloro:green--><span style="color:green <!--/coloro-->
>>
>> Server question from a high school teacher:
>> How can I advise my techs to create permissions so that Start>
>> MyComputer will ONLY take the student into specific folders on the
>> server?
>> Why? To my surprise, this year my students can no longer access or
>> even see My Computer. Hence, they are blocked from the folders where
>> they retrieve and deposit their class work. I need to get their
>> access back to these server based folders WITHOUT offering them
>> entry ways into sensitive areas that the tech wants to protect.
>><!--colorc--><!--/colorc-->
>
> Mhm. Sorry to say this but if your server administrators are unable
> to set appropriate share or folder permissions then you should either
> let them attend an appropriate training course or replace them by
> competent people. Setting permissions is basic stuff for a server
> admin.<!--colorc--><!--/colorc-->

I agree, and it sounds as though someone has gone crazy with GPOs.
To the OP: your students should be saving to redirected folders on the
server, not local drives, and the tech should restrict access to the local
drives only.

 

<!--QuoteBegin-'Lanwench [MVP - Exchange+--><div class='quotetop'>('Lanwench [MVP - Exchange) <div class='quotemain'><!--QuoteEBegin-->;1114174']Pegasus [MVP] <news@microsoft.com> wrote:<!--coloro:blue--><span style="color:blue <!--/coloro-->
> "pruez" <pruez.3y2trs@news.home.local> wrote in message
> newsruez.3y2trs@news.home.local...<!--coloro:green--><span style="color:green <!--/coloro-->
>>
>> Server question from a high school teacher:
>> How can I advise my techs to create permissions so that Start>
>> MyComputer will ONLY take the student into specific folders on the
>> server?
>> Why? To my surprise, this year my students can no longer access or
>> even see My Computer. Hence, they are blocked from the folders where
>> they retrieve and deposit their class work. I need to get their
>> access back to these server based folders WITHOUT offering them
>> entry ways into sensitive areas that the tech wants to protect.
>><!--colorc--><!--/colorc-->
>
> Mhm. Sorry to say this but if your server administrators are unable
> to set appropriate share or folder permissions then you should either
> let them attend an appropriate training course or replace them by
> competent people. Setting permissions is basic stuff for a server
> admin.<!--colorc--><!--/colorc-->

I agree, and it sounds as though someone has gone crazy with GPOs.
To the OP: your students should be saving to redirected folders on the
server, not local drives, and the tech should restrict access to the local
drives only.<!--QuoteEnd--> <!--QuoteEEnd-->

As the teacher who posted this question... thank you for your comments. I take it from what you have written that it is possible for my students to click on Start > MyComputer and then be allowed to go ONLY to the two folders (on the server) and NO where else.

If this is so; without challenging people for whom there is no money for training and who find it easier and cheaper to just restrict ALL students, please tell me how I might encourage/tell them to set the permissions so that ONLY my students can access the folders on the server where I have their class materials and where they turn in their completed work?

Thank you.

 

"pruez" <pruez.3y427c@news.home.local> wrote in message
newsruez.3y427c@news.home.local...<!--coloro:blue--><span style="color:blue <!--/coloro-->
>
> 'Lanwench [MVP - Exchange Wrote:<!--coloro:green--><span style="color:green <!--/coloro-->
>> ;1114174']Pegasus [MVP] <news@microsoft.com> wrote:<!--coloro:darkred--><span style="color:darkred <!--/coloro-->
>> > "pruez" <pruez.3y2trs@news.home.local> wrote in message
>> > newsruez.3y2trs@news.home.local...
>> >>
>> >> Server question from a high school teacher:
>> >> How can I advise my techs to create permissions so that Start>
>> >> MyComputer will ONLY take the student into specific folders on the
>> >> server?
>> >> Why? To my surprise, this year my students can no longer access or
>> >> even see My Computer. Hence, they are blocked from the folders<!--colorc--><!--/colorc-->
>> where<!--coloro:darkred--><span style="color:darkred <!--/coloro-->
>> >> they retrieve and deposit their class work. I need to get their
>> >> access back to these server based folders WITHOUT offering them
>> >> entry ways into sensitive areas that the tech wants to protect.
>> >>
>> >
>> > Mhm. Sorry to say this but if your server administrators are unable
>> > to set appropriate share or folder permissions then you should<!--colorc--><!--/colorc-->
>> either<!--coloro:darkred--><span style="color:darkred <!--/coloro-->
>> > let them attend an appropriate training course or replace them by
>> > competent people. Setting permissions is basic stuff for a server
>> > admin.<!--colorc--><!--/colorc-->
>>
>> I agree, and it sounds as though someone has gone crazy with GPOs.
>> To the OP: your students should be saving to redirected folders on the
>>
>> server, not local drives, and the tech should restrict access to the
>> local
>> drives only.<!--colorc--><!--/colorc-->
>
> As the teacher who posted this question... thank you for your comments.
> I take it from what you have written that it is possible for my students
> to click on Start > MyComputer and then be allowed to go ONLY to the two
> folders (on the server) and NO where else.
>
> If this is so; without challenging people for whom there is no money
> for training and who find it easier and cheaper to just restrict ALL
> students, please tell me how I might encourage/tell them to set the
> permissions so that ONLY my students can access the folders on the
> server where I have their class materials and where they turn in their
> completed work?
>
> Thank you.
>
>
> --
> pruez
> Posted via Forum to Usenet gateway
><!--colorc--><!--/colorc-->

Right-click each folder on the share in question, then set the permissions
you need. If unsure how to do this, click Start / Help and look for help on
"Permissions".

About not training your server administrators: Sooner or later you will find
that this is a very expensive option you choose. Students are known to be
clever and skillful when it comes to cracking protected systems. Unless you
set up a robust security system your students will penetrate your server and
access restricted data - maybe read your exam questions in advance, maybe
modify their own exam results. It's only a question of time until it
happens.

 

<!--QuoteBegin-'Pegasus [MVP+--><div class='quotetop'>('Pegasus [MVP) <div class='quotemain'><!--QuoteEBegin-->;1114425']"pruez" <pruez.3y427c@news.home.local> wrote in message
newsruez.3y427c@news.home.local...<!--coloro:blue--><span style="color:blue <!--/coloro-->
>
> 'Lanwench [MVP - Exchange Wrote:<!--coloro:green--><span style="color:green <!--/coloro-->
>> ;1114174']Pegasus [MVP] <news@microsoft.com> wrote:<!--coloro:darkred--><span style="color:darkred <!--/coloro-->
>> > "pruez" <pruez.3y2trs@news.home.local> wrote in message
>> > newsruez.3y2trs@news.home.local...
>> >>
>> >> Server question from a high school teacher:
>> >> How can I advise my techs to create permissions so that Start>
>> >> MyComputer will ONLY take the student into specific folders on the
>> >> server?
>> >> Why? To my surprise, this year my students can no longer access or
>> >> even see My Computer. Hence, they are blocked from the folders<!--colorc--><!--/colorc-->
>> where<!--coloro:darkred--><span style="color:darkred <!--/coloro-->
>> >> they retrieve and deposit their class work. I need to get their
>> >> access back to these server based folders WITHOUT offering them
>> >> entry ways into sensitive areas that the tech wants to protect.
>> >>
>> >
>> > Mhm. Sorry to say this but if your server administrators are unable
>> > to set appropriate share or folder permissions then you should<!--colorc--><!--/colorc-->
>> either<!--coloro:darkred--><span style="color:darkred <!--/coloro-->
>> > let them attend an appropriate training course or replace them by
>> > competent people. Setting permissions is basic stuff for a server
>> > admin.<!--colorc--><!--/colorc-->
>>
>> I agree, and it sounds as though someone has gone crazy with GPOs.
>> To the OP: your students should be saving to redirected folders on the
>>
>> server, not local drives, and the tech should restrict access to the
>> local
>> drives only.<!--colorc--><!--/colorc-->
>
> As the teacher who posted this question... thank you for your comments.
> I take it from what you have written that it is possible for my students
> to click on Start > MyComputer and then be allowed to go ONLY to the two
> folders (on the server) and NO where else.
>
> If this is so; without challenging people for whom there is no money
> for training and who find it easier and cheaper to just restrict ALL
> students, please tell me how I might encourage/tell them to set the
> permissions so that ONLY my students can access the folders on the
> server where I have their class materials and where they turn in their
> completed work?
>
> Thank you.
>
>
> --
> pruez
> Posted via Forum to Usenet gateway
><!--colorc--><!--/colorc-->

Right-click each folder on the share in question, then set the permissions
you need. If unsure how to do this, click Start / Help and look for help on
"Permissions".

About not training your server administrators: Sooner or later you will find
that this is a very expensive option you choose. Students are known to be
clever and skillful when it comes to cracking protected systems. Unless you
set up a robust security system your students will penetrate your server and
access restricted data - maybe read your exam questions in advance, maybe
modify their own exam results. It's only a question of time until it
happens.<!--QuoteEnd--> <!--QuoteEEnd-->

Thanks for all your comments. If I were the one autnorizing training, I would. At this point in time teachers are being laid off and schools are being closed and classes are over booked... to save money. Training techs is not even on the radar. Again, thanks.

 

pruez <pruez.3y5wvd@news.home.local> wrote:<!--coloro:blue--><span style="color:blue <!--/coloro-->
> 'Pegasus [MVP Wrote:<!--coloro:green--><span style="color:green <!--/coloro-->
>> ;1114425']"pruez" <pruez.3y427c@news.home.local> wrote in message
>> newsruez.3y427c@news.home.local...<!--coloro:darkred--><span style="color:darkred <!--/coloro-->
>>>
>>> 'Lanwench [MVP - Exchange Wrote:
>>>> ;1114174']Pegasus [MVP] <news@microsoft.com> wrote:
>>>>> "pruez" <pruez.3y2trs@news.home.local> wrote in message
>>>>> newsruez.3y2trs@news.home.local...
>>>>>>
>>>>>> Server question from a high school teacher:
>>>>>> How can I advise my techs to create permissions so that Start>
>>>>>> MyComputer will ONLY take the student into specific folders on
>>>>>> the server?
>>>>>> Why? To my surprise, this year my students can no longer access
>>>>>> or even see My Computer. Hence, they are blocked from the
>>>>>> folders where they retrieve and deposit their class work. I need
>>>>>> to get their access back to these server based folders WITHOUT
>>>>>> offering them entry ways into sensitive areas that the tech
>>>>>> wants to protect.
>>>>>>
>>>>>
>>>>> Mhm. Sorry to say this but if your server administrators are
>>>>> unable to set appropriate share or folder permissions then you
>>>>> should either let them attend an appropriate training course or
>>>>> replace them by competent people. Setting permissions is basic
>>>>> stuff for a server admin.
>>>>
>>>> I agree, and it sounds as though someone has gone crazy with GPOs.
>>>> To the OP: your students should be saving to redirected folders on
>>>> the
>>>>
>>>> server, not local drives, and the tech should restrict access to
>>>> the local
>>>> drives only.
>>>
>>> As the teacher who posted this question... thank you for your
>>> comments. I take it from what you have written that it is possible
>>> for my students to click on Start > MyComputer and then be allowed
>>> to go ONLY to the two folders (on the server) and NO where else.
>>>
>>> If this is so; without challenging people for whom there is no money
>>> for training and who find it easier and cheaper to just restrict ALL
>>> students, please tell me how I might encourage/tell them to set the
>>> permissions so that ONLY my students can access the folders on the
>>> server where I have their class materials and where they turn in
>>> their completed work?
>>>
>>> Thank you.
>>>
>>>
>>> --
>>> pruez
>>> Posted via Forum to Usenet gateway
>>><!--colorc--><!--/colorc-->
>>
>> Right-click each folder on the share in question, then set the
>> permissions
>> you need. If unsure how to do this, click Start / Help and look for
>> help on
>> "Permissions".
>>
>> About not training your server administrators: Sooner or later you
>> will find
>> that this is a very expensive option you choose. Students are known
>> to be
>> clever and skillful when it comes to cracking protected systems.
>> Unless you
>> set up a robust security system your students will penetrate your
>> server and
>> access restricted data - maybe read your exam questions in advance,
>> maybe
>> modify their own exam results. It's only a question of time until it
>> happens.<!--colorc--><!--/colorc-->
>
> Thanks for all your comments. If I were the one autnorizing training,
> I would. At this point in time teachers are being laid off and
> schools are being closed and classes are over booked... to save
> money. Training techs is not even on the radar. Again, thanks.<!--colorc--><!--/colorc-->

True, but in a market like this there are a lot of trained and talented
geeks looking for work....I'm just sayin'.

 

pruez <pruez.3y427c@news.home.local> wrote:<!--coloro:blue--><span style="color:blue <!--/coloro-->
> 'Lanwench [MVP - Exchange Wrote:<!--coloro:green--><span style="color:green <!--/coloro-->
>> ;1114174']Pegasus [MVP] <news@microsoft.com> wrote:<!--coloro:darkred--><span style="color:darkred <!--/coloro-->
>>> "pruez" <pruez.3y2trs@news.home.local> wrote in message
>>> newsruez.3y2trs@news.home.local...
>>>>
>>>> Server question from a high school teacher:
>>>> How can I advise my techs to create permissions so that Start>
>>>> MyComputer will ONLY take the student into specific folders on the
>>>> server?
>>>> Why? To my surprise, this year my students can no longer access or
>>>> even see My Computer. Hence, they are blocked from the folders
>>>> where they retrieve and deposit their class work. I need to get
>>>> their access back to these server based folders WITHOUT offering
>>>> them entry ways into sensitive areas that the tech wants to
>>>> protect.
>>>>
>>>
>>> Mhm. Sorry to say this but if your server administrators are unable
>>> to set appropriate share or folder permissions then you should
>>> either let them attend an appropriate training course or replace
>>> them by competent people. Setting permissions is basic stuff for a
>>> server admin.<!--colorc--><!--/colorc-->
>>
>> I agree, and it sounds as though someone has gone crazy with GPOs.
>> To the OP: your students should be saving to redirected folders on
>> the
>>
>> server, not local drives, and the tech should restrict access to the
>> local
>> drives only.<!--colorc--><!--/colorc-->
>
> As the teacher who posted this question... thank you for your
> comments. I take it from what you have written that it is possible
> for my students to click on Start > MyComputer and then be allowed to
> go ONLY to the two folders (on the server) and NO where else.
>
> If this is so; without challenging people for whom there is no money
> for training and who find it easier and cheaper to just restrict ALL
> students, please tell me how I might encourage/tell them to set the
> permissions so that ONLY my students can access the folders on the
> server where I have their class materials and where they turn in their
> completed work?
>
> Thank you.<!--colorc--><!--/colorc-->

In addition to Pegasus' comments for the network drives -

Check out KB 278295 for info on how to hide the local hard drives.
You want to restrict A through D. You will want to be using Folder
Redirection for My Documents and Desktop at least - and mapped drives for
other network locations as needed. If your techs don't know how to set up
NTFS security using AD groups, they should probably not have their jobs.