How to prevent a rdp user from mapping drives on the server ?

Hi,
User A from Domain A (using Win7 pro) is able to rdp to Server Z (Windows Server 2008) which is in Domain Z and is able to map drive.
My question is : How do I prevent User A from mapping any drive in Server Z ?
Please advise. TIA !

Hi,
if a user has access to the other share there is no way to prevent that user from mapping a drive.
However, you can remove the "map Network drive" functionality via policy, please see
http://msdn.microsoft.com/en-us/library/ms812045.aspx
That does not prevent users from mapping their drive manually using the "net use ..." command from a shell. While it is possible to restrict running of the net command, I do not recommend that (see
http://social.technet.microsoft.com/Forums/windowsserver/en-US/b5012142-cfe9-4b24-99b9-d7ff3b84f0f4/what-security-policy-blocks-use-of-the-net-command-for-nonadmin-users?forum=winserverGP).
( What you may consider when having Shares cross-forest, you can remove that authorized users permission from the share replacing it by DOMAIN\Domain users groups, etc. So access to the share is limited instead of using a share that a user has access to.
Please Keep in mind that even when you remove the Network drives a user can still Access the resource via UNC. )
Regards,
Martin

Similar Messages

How to prevent a portal user from using the BEx Analyzer ?

Hi,
we have different type of users : most users may use the portal as well
as the analyzer ;
we have one special user with extended authorizations : this user
should use the portal , where he has a limited set of queries to run
with hardcoded filters ==> this user should not be able to use the
analyzer however, since he then would be able to call all other queries
by using the find function ;
how can we make sure this user cannot use the analyzer , using SAP
authorizations ?
best regards,
Erwin Van Giel.

Hi,
if I remove the complete S_RFC authorization for the user then the BEx Analyzer cannot connect anymore to the BW system, but neither can the user run reports from the portal : it needs the S_RFC with 'SYST'.
If I only remove the RRMX from the S_TCODE and from the S_RFC, it does not prevent the user from starting the BEx Analyzer and connecting to the BW system. It only stops the user if he would start the RRMX transaction from within an SAPGUI session.
Perhaps there should be a value in the S_RFC that allows connections from the portal but not from the BEx Analyzer .... ?
so not solved yet ....
best regards,
Erwin.

How to prevent album cover artwork from being synced to the I Phone

The album cover artwork is nice enough on the Mac but it is unweildy on the I Phone (I Phone 5 S). It spaces out the real information needed which is simply folder, playlist information. In fact, I can't shuffle music among all playlists contained in a single folder, a related problem. If necessary as a solution I could live without the album cover art anywhere in I Tunes, including on the laptop.

Thanks for responding. Even when a tune is playing and the lower left photo is toggled to "now playing," the photo on the left is different than the album cover up on top. Both are the same ONLY on the first track of the album. The album cover on the top is apparently no longer available on Amazon, CD Universe, etc., so I can't move it to the desktop and enter it as a new piece of artwork. If I am too vague about what I'm attempting to do, please call me collect at 760.471.8011.

How to setup a different user/group menu language than the server?

Hi,
I want to keep my server environment (menus) in English. The users use Spanish and French. Is it possible to do in Work group manager?
thanks

Self answered....
User Language when first log in = Default installation Language of the workstation

HT3951 How do I transfer iTunes credit from an ipod to the server ? Credit is only showing on the iPod and not iTunes when accessed from other accounts.

My daughter loaded her iPod touch from some gift cards .
iPod stats : Model MD057LL ( 4th gen ) running iOS 6.0.1 (10A523)
The credit shows up there, but not for our same account on iPad or computer iTunes.
She's unable to download any apps or music on her iPod, so we were trying to do it through the computer.

Gift-card redemptions are associated with the Apple ID/iTunes account in which they were redeemed. You have to purchase items from that account.

How do I prevent other Mac users from changing my Airport Extreme Network Name and Password within the Airport Utility?

How do I prevent other Mac users from changing my Airport Extreme Network Name and Password within the Airport Utility? My company is using an Airport Extreme in our office now and I want to prevent other employees from messing with the network/settings. Is there a way to place a password on the settings to allow only the admin to access the network name and password?

Hi - you have will have to change the device passwords on all the base stations and then don't give them to anyone except the administrators and tell them not to save them on their computers that use the older versions of the Airport Utility - for the newer versions like the mobile apps, as soon as you enter the pasword it is saved and is visible in the advanced pane along with the network password - so if anyone gets a hold of your iPad or iPhone, they can edit the whole network - I have this same issue with my networks in the office and it is inconvenient but doable - I hope this helps

How to Prevent SharePoint Farm Password from Changing

I have been trying to stop the SP farm account, spfarm, from password changing. SharePoint Central Administration is used and I go to Central Security -> Configure managed accounts. I set spfarm not to change but it makes no difference.
It still changes. When that happens it screws up the SharePoint VSS Writer service account and backups fail (the password synch script has to run to fix). When the setting in SP CA is changed to allow password changes, the SharePoint VSS Writer
service account still has a problem and backups fail.
Additionally, I have run the two below scripts when necessary to try to correct the problem and it works until the password changes again. It seems as though the password changes whenever the server restarts or at least once every week or so.
Can anyone help me with this? I don't care if the password changes on a schedule as long as it doesn't cause the SharePoint VSS Writer service to fail during backup.
Repair-SPManagedAccountDeployment (This checks synch of passwords)
set-spmanagedAccount -UseExistingPassword
This is on a Windows Small Business Server 2011, which runs SharePoint 2010.
Tony

Hi Tony,
In SBS 2011, use 3 different accounts to run Windows SharePoint Foundation. The accounts are spfarm (SharePoint
Farm Account), spsearch, and spwebapp. For security reasons the passwords on these accounts are periodically reset. The password for spfarm is reset every 7 days that the Windows SBS Manager service is running.
à
How to Prevent SharePoint Farm Password from Changing
I will suggest that set the password expiry to be longer (such as: a month or 365 days or even more) and apply
it. Maybe a workaround.
By the way, the Windows SBS Manager service manages the spfarm account. This spfarm account will be found under
MyBusiness-> Users-> SBS Users in ADUC. If you navigate to the spfarm account in ADUC and open the Properties of it, then select
“Password never expires” under Account options in Account tab. Please check if this can help you to achieve target.
Hope this helps.
Best regards,
Justin Gu

Preventing the User from going back to the main page after logging out.

Hi all,
In my project I want to prevent the User from going back to the Main page, by clicking the back button of the browser, after the user has loggged out.I had invalidated the session so the user will not be able to do any operations, but he can vew the infos. I want to redirect to the login page if the user tries to go back using the back button after he has logged out.
I tried the same in this forum after loging out. Surprisingly it is the same. I can browse through all the operations i did even after logging out from here.
Is it not possible to do that in Servlets?Could somebody help?
Thanks,
Zach.

Hi,
You can use a servlet filter to do this , as it can interceptany request to your application you can decide to allow user access or not to any page/servlet.
public class Test implements Filter{
     public void destroy() {
     public void doFilter(ServletRequest arg0, ServletResponse arg1, FilterChain arg2) throws IOException,
               ServletException {
          System.out.println("filter");
          HttpServletRequest request = (HttpServletRequest) arg0;
          if(!request.getRequestURI().contains("index")){ // set condition that will be checked to verify if the user is logged in
               System.out.println("redirecting ... ");
               RequestDispatcher d = arg0.getRequestDispatcher("/index.jsp");
               d.forward(arg0, arg1);
          arg2.doFilter(arg0, arg1);
     public void init(FilterConfig arg0) throws ServletException {
}in you web.xml add :
<filter>
          <filter-name>test</filter-name>
          <filter-class>test.Test</filter-class>
     </filter>
     <filter-mapping>
          <filter-name>test</filter-name>
          <url-pattern>/*</url-pattern>
     </filter-mapping>

How to prevent iTunes for Windows from "Updating iTunes Library"? (Library is on a NAS and managed by iTunes for Mac. Now getting update wars between Mac and Windows versions of the player.

How to prevent iTunes for Windows from "Updating iTunes Library"?
My library is on a NAS and managed by iTunes on a Mac. I can connect from wife's Windows laptop using iTunes for Windows but every time I do, it Updates iTunes Library. Next time I log in from my Mac it Updates iTunes Library in return. It appears I'm experiencing "Update Wars" between the Mac and Windows versions of iTunes. I would like to allow my wife to stream iTunes songs to her new laptop but I don't want any updates from this source... prefer to manage the library from my Mac and not allow Windows to do any thing other than listen to existing playlists.
Thanks for any help/suggestions.

Connect the PC to the library on the NAS. Wait while "updated".
Under Edit > Preferences > Advanced make sure the media folder is correctly pointed at the media folder on the NAS. If not correct, close iTunes, wait a few moments, then open iTunes again.
Close iTunes on the PC. Do not open iTunes on the Mac.
Copy the library files, iTunes Library.itl, iTunes Library Extras.itdb, iTunes Library Genius.itdb, sentinel and the folder Album Artwork into an empty iTunes folder on the PC, for example C:\iTunes.
Click the icon to start iTunes and immediately press and hold down SHIFT. Keep holding until prompted to choose or create a library. Click choose and browse to the copied .itl file, e.g. C:\iTunes\iTunes Library.itl
The library should now work properly on the PC, however check the setting for the media folder. If needs be correct, close iTunes and reopen.
Open iTunes on the Mac. It will update again, but that should be last time.
tt2

Is there a way to prevent an end-user from changing their own password?

All you guru's out there, I need your help. Is there a way to prevent an end-user from changing their own password? Is there a function or procedure I can create or what?

In this case, you do not want someone (whoever they are DBA etc) to connect as that
particuler user to change the password.Yes, but I wouldn't expect the users to[i] know that password. The connnect would be handled automatically, behind the scenes.
The clear implication of the OP's question and response was that users would not be allowed to change their own passwords. I'm guessing this is in response to a policy that says users mustn't have simple passwords like 123abc or mom. In such a scenario a better approach would be to apply regexp to a user's password to ensure it contains a mix of letters, numbers, punctuation, etc to achieve the desired level of complexity.
So questions, should not be regarded as daft Agreed, but the same is unfortunately not always true of business decisions. As the OP has told us not to ask we cannot know why they want to do this. Personally, I think a user's individual password should always be their responsibility; anything else strikes me as insecure. YMMV.
Cheers, APC

How do i delete a user from my macbook pro?

How do I delete a user from my macbook pro?

If you've admin privileges and there are no files in the user account that you want to keep, just go to System Preferences>Users & Groups and unlock it with your admin password. Select the user that you want to delete and click on the minus button. You'll get a warning before you completely delete the user but once it's gone, it's gone.
Clinton

How can i know iphone users from contacts, how can i know iphone users from contacts

how can i know iphone users from contacts, how can i know iphone users from contacts

You could open that contact in messages, and your iPhone should say "iMessage" instead of "Message" in the text field. However, this depends wether the contact has iMessage enabled, but it could also mean the contact is using an iPad or iPod touch.
Make sure that their mobile number is in iMessage, and if the text field says "iMessage", then they are using an iPhone (if they've enabled it).

How to drag and drop user from one node to other node.

Dear All,
How to drag and drop user from one node to other node.I tried but no success.
What are precautions to be taken.
Cay anybody kindly explain it.
Thank you.

Hello, if you had this message you had created BP....
Now you don't have to user USERS_GEN this transaction is used only in first action, when you create the user in R/3 and then you pass this user to EBP in the organizational structure.
Now you have to:
1) Go to PPOMA_BBP
2) Double click on organizational unit that you want to put this user (purchasing organization or purchasing group box for example)
3) Select assign button in the top of the functions in the transaction
4) Click on incorporates -- position
5) Put userID that you want to add in this organizational unit
6) Click Save
Thanks
Rosa

Just got a mac air and started using it. after getting it set up i migrated files from my old pc. i did not realize that the files migrated to a different user account. how do i delete this user account and not lose the migrated files which i need

I just got a mac air and set it up and started using. after getting famiiar with it i migrated my files from my old pc. i did not realise that the files migrated to a new user account. how do i delete this user account but not lose the migrated files?

Mac 101: File Sharing
Mac OS X 10.7 Help: Transfer files between two Mac computers
Mac OS X 10.7 Help: Set up a Windows computer to share files with Mac users
Mac OS X 10.7 Help: Use iDisk to share files
Mac OS X: Sharing your files with non-Apple computers
How to share a Mac's files with a PC and vice versa.

How to prevent duplicate web pages from loading

<blockquote>Locking duplicate thread.<br>
Please continue here: [[/questions/930219]]</blockquote>
how to prevent duplicate web pages from loading

<s>Hi berternie, can you describe this in more detail?
Are you saying the identical page loads in two different tabs? When does that happen -- when you click a link? or when you use a bookmark?
Or do you have multiple tabs open every time you see your home page (i.e., when you start up, open a new window, or click the home icon)?</s>
I see, you have more info in this thread: https://support.mozilla.org/en-US/questions/930219

How to prevent a rdp user from mapping drives on the server ?

Similar Messages

Maybe you are looking for