This site requires JavaScript, please enable it in your browser!
Greenfoot back
garethedmondson
garethedmondson wrote ...

2015/4/17

Network Install Question

garethedmondson garethedmondson

2015/4/17

#
Good afternoon, We have a pupil logon that is pretty tied down with no access or visibility of the C drive. However Greenfoot seems to bypass these settings. When opening a scenario from the initial menu screen, pupils are shown the Scenarios folder which is held in the Greenfoot directory on the C drive. Pupils can see the C drive. Why is it/How is it that Greenfoot can bypass all the security we have in place and am I doing something wrong when deploying via GPO? Is there a setting I can change? Regards Gareth
davmac davmac

2015/4/17

#
Hi Gareth, You may by now have seen the email response from Neil. However, just to elaborate a little further and recap for anyone reading here:
  • The Group Policy settings you used to hide the C: drive simply make the drive invisible in Windows Explorer and in standard Windows file dialogs. Greenfoot uses the Swing toolkit provided by Java to present its file dialogs, and Swing does not use the standard Windows file dialogs; therefore these Group Policy settings do not affect Greenfoot.
  • In general, hiding drives in this way gives only the illusion of security. Programs are still fully able to access the hidden drives. In particular programs written in Greenfoot can still use Java APIs to access the contents of the hidden drives.
  • The correct way to secure a system is by putting appropriate access restrictions on the drive, its folders and files. Normally you don't need to do anything special in this regard; in a standard Windows installation, normal users do not have write access to files outside their own profile directory. If you have concerns about access to particular files/folders, you can set explicit permissions on those.
Full information on the group policy settings to hide drives can be found in Microsoft documentation here. I hope this makes sense to you. Davin
You need to login to post a reply.