Hiding files/folder shares from users
-
Where are you launching Excel from? Inside the RDP session? if yes, it will suffer the same issue as local browsing, unless you specifically tell Excel to look at \\server\share\ etc.
-
@black3dynamite said in Hiding files/folder shares from users:
@joel said in Hiding files/folder shares from users:
Yes, it is 100% visible. I've even logged onto the server via RDP and can see the folder there. However, it ISNT there when I browse to \Server\Shared. Of course I dont want to see the folder in any case as I dont have permission to it! I only want to see the folders I do have access to!
I'm not sure it possible to hide folders if you have access to it locally.
Sure you can, as long as you look for those folders through the filter - in this case, through the SMB share.
I'm guessing he's having the same problem he was having before - Excel is going to to the local drive, not the mapped network share.
What makes this more complicated is if the data is on the same machine he's actually on. i.e. local drive E:\share is mapped to network drive s:\
You'll need Excel to look through S:\ not E:\ to see the filtering
-
Access based enumeration is a function of the SMB share. If that's not in the loop, it can't work.
-
The E:\ isnt on my local laptop. It's on a hosted server along with Excel which is setup as a remote app.
We have a VPN to the server so from my local laptop, I can use SMB path \Server\shared\ and am able to see the folder I need (Folder1)
However if I launch Excel (remote app) its looking locally on the server so if I browse to E:\Shared - I am able to see Folder1 and Folder2 (although permission denied to Folder2) but I DONT want to see it there in the 1st place!
-
@joel said in Hiding files/folder shares from users:
The E:\ isnt on my local laptop. It's on a hosted server along with Excel which is setup as a remote app.
We have a VPN to the server so from my local laptop, I can use SMB path \Server\shared\ and am able to see the folder I need (Folder1)
However if I launch Excel (remote app) its looking locally on the server so if I browse to E:\Shared - I am able to see Folder1 and Folder2 (although permission denied to Folder2) but I DONT want to see it there in the 1st place!
This is exactly as I said.
But first let me confirm something - Is Excel on the same machine as the files are saved on?
-
@dashrender said in Hiding files/folder shares from users:
@joel said in Hiding files/folder shares from users:
The E:\ isnt on my local laptop. It's on a hosted server along with Excel which is setup as a remote app.
We have a VPN to the server so from my local laptop, I can use SMB path \Server\shared\ and am able to see the folder I need (Folder1)
However if I launch Excel (remote app) its looking locally on the server so if I browse to E:\Shared - I am able to see Folder1 and Folder2 (although permission denied to Folder2) but I DONT want to see it there in the 1st place!
This is exactly as I said.
But first let me confirm something - Is Excel on the same machine as the files are saved on?
yes they are
-
@joel said in Hiding files/folder shares from users:
@dashrender said in Hiding files/folder shares from users:
@joel said in Hiding files/folder shares from users:
The E:\ isnt on my local laptop. It's on a hosted server along with Excel which is setup as a remote app.
We have a VPN to the server so from my local laptop, I can use SMB path \Server\shared\ and am able to see the folder I need (Folder1)
However if I launch Excel (remote app) its looking locally on the server so if I browse to E:\Shared - I am able to see Folder1 and Folder2 (although permission denied to Folder2) but I DONT want to see it there in the 1st place!
This is exactly as I said.
But first let me confirm something - Is Excel on the same machine as the files are saved on?
yes they are
And E: on that server is the local drive with the files?
-
@dashrender said in Hiding files/folder shares from users:
@joel said in Hiding files/folder shares from users:
@dashrender said in Hiding files/folder shares from users:
@joel said in Hiding files/folder shares from users:
The E:\ isnt on my local laptop. It's on a hosted server along with Excel which is setup as a remote app.
We have a VPN to the server so from my local laptop, I can use SMB path \Server\shared\ and am able to see the folder I need (Folder1)
However if I launch Excel (remote app) its looking locally on the server so if I browse to E:\Shared - I am able to see Folder1 and Folder2 (although permission denied to Folder2) but I DONT want to see it there in the 1st place!
This is exactly as I said.
But first let me confirm something - Is Excel on the same machine as the files are saved on?
yes they are
And E: on that server is the local drive with the files?
yes it is
-
@joel said in Hiding files/folder shares from users:
@dashrender said in Hiding files/folder shares from users:
@joel said in Hiding files/folder shares from users:
@dashrender said in Hiding files/folder shares from users:
@joel said in Hiding files/folder shares from users:
The E:\ isnt on my local laptop. It's on a hosted server along with Excel which is setup as a remote app.
We have a VPN to the server so from my local laptop, I can use SMB path \Server\shared\ and am able to see the folder I need (Folder1)
However if I launch Excel (remote app) its looking locally on the server so if I browse to E:\Shared - I am able to see Folder1 and Folder2 (although permission denied to Folder2) but I DONT want to see it there in the 1st place!
This is exactly as I said.
But first let me confirm something - Is Excel on the same machine as the files are saved on?
yes they are
And E: on that server is the local drive with the files?
yes it is
You have to remove the logged in user's ability to see the local E: drive and map a network drive to the actual share in that remote app session. Then the ABE can do it's job through the share.
-
I know there have been tools in the past to remove local drives from remote access users visual/access space, but it's been ages, so I don't recall them at this time.
-
As a test, create a logon script for the user that the Excel remote app is running as and make that script map a drive X: (assuming not use) to the desired share.. then you should see X: inside Excel and you should see the results you want.
-
No problem I will look at this more tomorrow.
Do you think I could setup a group policy to restrict users to local drives (I dont want them seeing the C drive either I guess) and then map the drive -
@dashrender said in Hiding files/folder shares from users:
As a test, create a logon script for the user that the Excel remote app is running as and make that script map a drive X: (assuming not use) to the desired share.. then you should see X: inside Excel and you should see the results you want.
Great, i'll try this tomorrow and come back to you with update - im very grateful to all for their inputs so far
-
@dashrender said in Hiding files/folder shares from users:
I know there have been tools in the past to remove local drives from remote access users visual/access space, but it's been ages, so I don't recall them at this time.
Windows SteadyState
-
@black3dynamite said in Hiding files/folder shares from users:
@dashrender said in Hiding files/folder shares from users:
I know there have been tools in the past to remove local drives from remote access users visual/access space, but it's been ages, so I don't recall them at this time.
Windows SteadyState
Didn't that go away like a decade ago?
-
@scottalanmiller said in Hiding files/folder shares from users:
@black3dynamite said in Hiding files/folder shares from users:
@dashrender said in Hiding files/folder shares from users:
I know there have been tools in the past to remove local drives from remote access users visual/access space, but it's been ages, so I don't recall them at this time.
Windows SteadyState
Didn't that go away like a decade ago?
Was Vista or Windows 7 the last to use it? or heck, even XP?
-
9+ years ago. Steady State died with Vista.
-
@black3dynamite said in Hiding files/folder shares from users:
@dashrender said in Hiding files/folder shares from users:
I know there have been tools in the past to remove local drives from remote access users visual/access space, but it's been ages, so I don't recall them at this time.
Windows SteadyState
How does SteadyState remove the local drives from the view of the user? It's my understanding that SteadState locked the drive so users can't write to them.. doesn't mean they can't see them.
-
@joel said in Hiding files/folder shares from users:
No problem I will look at this more tomorrow.
Do you think I could setup a group policy to restrict users to local drives (I dont want them seeing the C drive either I guess) and then map the driveAgreed, I'd assume you wouldn't want the users to see any local drives at all.
-
@dashrender said in Hiding files/folder shares from users:
@black3dynamite said in Hiding files/folder shares from users:
@dashrender said in Hiding files/folder shares from users:
I know there have been tools in the past to remove local drives from remote access users visual/access space, but it's been ages, so I don't recall them at this time.
Windows SteadyState
How does SteadyState remove the local drives from the view of the user? It's my understanding that SteadState locked the drive so users can't write to them.. doesn't mean they can't see them.
Correct. It's not unlike snapshots.
