OFF: System Policy to Hide Network Neighborhood Does Not Completely Restrict Network Access (206743)


The information in this article applies to:

  • Microsoft Office 2000 Premium
  • Microsoft Office XP Professional
  • Microsoft Office 2000 (Setup), when used with:
    • the operating system: Microsoft Windows 98
    • the operating system: Microsoft Windows 2000
    • the operating system: Microsoft Windows NT 4.0
This article was previously published under Q206743
IMPORTANT: This article contains information about editing the registry. Before you edit the registry, make sure you understand how to restore it if a problem occurs. For information about how to do this, view the ""Restoring the Registry"" Help topic in Regedit.exe or the ""Restoring a Registry Key"" Help topic in Regedt32.exe.

SYMPTOMS

When you create a system policy for the Network Neighborhood that restricts network access, users can still map a network drive from within the individual Microsoft Office programs.

CAUSE

This problem occurs when you run the Policy Editor program and, by using the Common.adm policy template in Microsoft Windows 98 or Microsoft Windows NT Server 4.0, you click Hide Network Neighborhood in the Shell restrictions.

In a Microsoft Office program, when you click Tools in the Open or Save As dialog box, you can still click Map Network Drive and connect to a network drive.

RESOLUTION

To turn off (disable) the Map Network Drive command on the Tools button of the Open and Save As dialog boxes within the Office programs, use the appropriate system policy for your version of Microsoft Windows:

Shellm.adm policy template included with Microsoft Windows 98Winnt.adm policy template included with Microsoft Windows NT Server 4.0Local Computer Policy for Microsoft Windows Server

NOTE: If you are using the Microsoft Office system policy templates that are included in the Microsoft Office Resource Kit, you must use the version of the System Policy Editor that is included in the Microsoft Office Resource Kit.

You can download ORKTools.exe, a self-extracting executable file that contains Poledit.exe, from online services. Download this file from the following Microsoft Web site:

http://www.microsoft.com/office/ork/2000/download/ORKTools.exe

You can edit the registry by using System Policy Editor (Poledit.exe) or Registry Editor (Regedit.exe). Check with your network administrator before you make any changes to the registry.

System Policy Editor (Poledit.exe) is available in the Tools\Reskit\Netadmin\Poledit folder on the Windows 98 CR-ROM or the I386 folder on the Windows NT CD-ROM. Use the Add/Remove Programs tool in Control Panel to install System Policy Editor.

Shellm.adm with Windows 98

  1. In the System Policy Editor program, click Policy Template on the Options menu. In the Policy Template Options dialog box, make sure the Shellm.adm template is loaded. If it is not loaded, click Add, browse to the Windows\Inf folder, and then install the template. Click OK.

    The Shellm.adm file is located in the Tools\Reskit\Netadmin\Poledit folder on the Windows 98 CD-ROM. If Poledit.exe has been installed, it is also located in the Windows\Inf folder on your hard disk.
  2. On the File menu, click Open Registry. Double-click Local User. Expand the Shell settings. Click to select Shell settings. Click to select Disable net connections/disconnections to restrict this setting. Click OK.

Winnt.adm with Windows NT 4.0 Server

  1. In the System Policy Editor program, click Policy Template on the Options menu. In the Policy Template Options dialog box, make sure the Winnt.adm template is loaded. If it is not loaded, click Add, browse to the Winnt\Inf folder, and then install the template. Click OK.

    The Winnt.adm file is located in the I386 folder on the Windows NT CD-ROM. If Poledit.exe is installed, it is also located in the Windows\Inf folder on your hard disk.NOTE: The default path of the system policy templates (.ADM files) on Microsoft Windows NT 4.0 Workstation and Microsoft Windows 2000 Server is c:\winnt\inf.

  2. On the File menu, click Open Registry. Double-click Local User. Expand the Windows NT Shell settings. Click to select Restrictions settings. Click to select the Remove the Map Network Drive option and the Disconnect Network Drive option to restrict this setting. Click OK.

Local Computer Policy in Windows 2000 Server

  1. Click Start and then click Run. In the Open box, type Mmc.exe and then click OK.
  2. If the Group Policy snap-in is installed, skip to step 3. If it is not installed, follow these steps:

    1. On the Console menu, click Add/Remove Snap In.
    2. In the Add/Remove Snap-In dialog box, click Add.
    3. In the Add Standalone Snap-In dialog box, click Group Policy, and then click Add.
    4. Click Finish and then click Close.
    5. Click OK to return to the console.
  3. In the console, expand the following items in this order: Local Computer Policy, User Configuration, Administrative Templates, Windows Components, and then Windows Explorer. Click the Remove Map Network Drive and Disconnect Network Drive option. Click to select Enabled. Close the console.
When you log off and log back on to Windows, the Map Network Drive setting will not appear in the Open dialog box or Save As dialog box of Office programs.

NOTE: The Local Computer Policy template for Microsoft Windows 2000 Server is Common.adm.
Modification Type:MajorLast Reviewed:4/17/2006
Keywords:kbprb KB206743
©2004 Microsoft Corporation. All rights reserved.