Saving on the C: Drive - Ignores Group Policy #62499

New Issue

Osian Davies · 2019-03-12T16:41:03+01:00

Osian Davies commented

2019-03-12 16:41:03 +01:00

Hi,

I'm and IT technician in a school and looking at installing this program for our Computer Science Students.

After doing some testing it seems pupils can save files to the C Drive. This is blocked by group policy but Blender seems to ignore it and lets them do it anyway.

Is there a fix or a way around this please?

Many Thanks

Osian Davies

System Information
Operating system:
Graphics card:

Blender Version
Broken:
(example: 2.79b release)
(example: 2.80, edbf15d3c0, blender2.8, 2018-11-28, as found on the splash screen)
Worked: (optional)

Short description of error

Exact steps for others to reproduce the error
Based on the default startup or an attached .blend file (as simple as possible).

Hi, I'm and IT technician in a school and looking at installing this program for our Computer Science Students. After doing some testing it seems pupils can save files to the C Drive. This is blocked by group policy but Blender seems to ignore it and lets them do it anyway. Is there a fix or a way around this please? Many Thanks Osian Davies **System Information** Operating system: Graphics card: **Blender Version** Broken: (example: 2.79b release) (example: 2.80, edbf15d3c044, blender2.8, 2018-11-28, as found on the splash screen) Worked: (optional) **Short description of error** **Exact steps for others to reproduce the error** Based on the default startup or an attached .blend file (as simple as possible).

Osian Davies commented

2019-03-12 16:41:03 +01:00

Added subscriber: @o.davies

Stephen Swaney commented

2019-03-12 16:45:39 +01:00

Added subscriber: @StephenSwaney

Stephen Swaney commented

2019-03-12 16:45:39 +01:00

Are you using an operating system?
Also, it helps to mention what version of Blender.

Are you using an operating system? Also, it helps to mention what version of Blender.

Osian Davies commented

2019-03-12 16:48:15 +01:00

Win 10 64 bit
Latest version of Blender, downloaded form the website today. Blender 2.79

Thanks You

Win 10 64 bit Latest version of Blender, downloaded form the website today. Blender 2.79 Thanks You

William Reynish commented

2019-03-12 16:51:23 +01:00

Added subscriber: @WilliamReynish

William Reynish commented

2019-03-12 16:51:23 +01:00

This is going to sound snarky, but we have a bug report form for a reason. We expect it to be filled out. Please do so, then we can take a closer look at the issue.

Thanks.

This is going to sound snarky, but we have a bug report form for a reason. We expect it to be filled out. Please do so, then we can take a closer look at the issue. Thanks.

Ray molenkamp commented

2019-03-12 16:58:30 +01:00

Added subscriber: @LazyDodo

Ray molenkamp commented

2019-03-12 16:58:30 +01:00

A group policy is not something software needs to/can check/can choose to ignore, we're just requesting the Windows API to write a file to a specific location, if the OS goes, "that is allowed" it'll happen, if there a policy prohibiting writing a file to a specific location the windows API will block it.

Osian Davies commented

2019-03-12 17:14:13 +01:00

System Information
Operating system: Win 10 64 bit
Graphics card: Intel HD Graphics 530

Blender Version : Blender 2.79
F4dc9f9db86

Short description of error
I'm and IT technician in a school and looking at installing this program for our Computer Science Students.

After doing some testing it seems pupils can save files to the C Drive. This is blocked by group policy but Blender seems to ignore it and lets them do it anyway.

Is there a fix or a way around this please?

Exact steps for others to reproduce the error:

InstalWindows Domain
DC: Win Server 2012 R2

System Information Operating system: Win 10 64 bit Graphics card: Intel HD Graphics 530 Blender Version : Blender 2.79 F4dc9f9db86 Short description of error I'm and IT technician in a school and looking at installing this program for our Computer Science Students. After doing some testing it seems pupils can save files to the C Drive. This is blocked by group policy but Blender seems to ignore it and lets them do it anyway. Is there a fix or a way around this please? Exact steps for others to reproduce the error: InstalWindows Domain DC: Win Server 2012 R2

ChristopherAnderssarian commented

2019-03-12 17:50:22 +01:00

Added subscriber: @ChristopherAnderssarian

ChristopherAnderssarian commented

2019-03-12 17:50:22 +01:00

What group policy do you have set up exactly?
Are you sure a standard user account can't create a file on the C Drive?
C:\Users\notadmin\AppData\Local\Temp is the default temp directory for Blender and many other programs and they would break if it was Read-only...

What group policy do you have set up exactly? Are you sure a standard user account can't create a file on the C Drive? C:\Users\notadmin\AppData\Local\Temp is the default temp directory for Blender and many other programs and they would break if it was Read-only...

Simon G. commented

2019-03-13 14:41:14 +01:00

Added subscriber: @intrigus-3

Brecht Van Lommel commented

2019-03-18 00:55:58 +01:00

Added subscriber: @brecht

Brecht Van Lommel commented

2019-03-18 00:55:58 +01:00

I guess this is about the "Hide these specified drives in My Computer " feature, which is not for security but just hiding some drives in file browsers. Might be good to support that in Blender, not sure we'd consider it a bug though.

I guess this is about the "[Hide these specified drives in My Computer ](https://support.microsoft.com/en-us/help/231289/using-group-policy-objects-to-hide-specified-drives)" feature, which is not for security but just hiding some drives in file browsers. Might be good to support that in Blender, not sure we'd consider it a bug though.

Osian Davies commented

2019-03-18 10:16:23 +01:00

Hi,

Sorry it's taking so long to get information back to you, the 3rd liners on the support desk are answering your questions as they are the ones that are trying to install it.

I believe @brecht has figured it out.
Are there any plans to add this as a feature?

In Education environemtns we don't even let staff have access or see the C: Drive never mind the pupils.

Probably not a bug no, but this was the only place I could find to speak to people who were involved with the software directly.

Thanks Very Much

Hi, Sorry it's taking so long to get information back to you, the 3rd liners on the support desk are answering your questions as they are the ones that are trying to install it. I believe @brecht has figured it out. Are there any plans to add this as a feature? In Education environemtns we don't even let staff have access or see the C: Drive never mind the pupils. Probably not a bug no, but this was the only place I could find to speak to people who were involved with the software directly. Thanks Very Much

Philipp Oeser commented

2019-03-27 12:54:34 +01:00

Added subscriber: @lichtwerk

Philipp Oeser commented

2019-03-27 12:54:34 +01:00

Since user info is here, putting back to "Needs triage by developer" (to decide if this would be supported at some point / or if this would be considered a bug)

Ray molenkamp commented

2019-03-27 13:50:09 +01:00

It's a feature request and it's honestly just Security theater, even if we implement hiding drives in the file browser like explorer does all we'd be doing is giving admins a false sense of security, nothing is stopping a student from running bpy.ops.save_as_mainfile("c:\someplace\whiii.blend"), manually entering paths in many of our UI elements or stop them from using any of the other file-io API's in python, if you don't want users to write files at a certain location it'll have to be enforced OS/filesystem level, not in the 'uhh we'll just hide in the in applications UI, you feel safer now? well you're not but ok....' level.

It's a feature request and it's honestly just Security theater, even if we implement hiding drives in the file browser like explorer does all we'd be doing is giving admins a false sense of security, nothing is stopping a student from running ` bpy.ops.save_as_mainfile("c:\someplace\whiii.blend")`, manually entering paths in many of our UI elements or stop them from using any of the other file-io API's in python, if you don't want users to write files at a certain location it'll have to be enforced OS/filesystem level, not in the 'uhh we'll just hide in the in applications UI, you feel safer now? well you're not but ok....' level.

Brecht Van Lommel commented

2019-03-27 13:52:08 +01:00

Changed status from 'Open' to: 'Archived'

Brecht Van Lommel closed this issue

2019-03-27 13:52:08 +01:00

Brecht Van Lommel self-assigned this 2019-03-27 13:52:08 +01:00

Brecht Van Lommel commented

2019-03-27 13:52:08 +01:00

Agree this is more a feature request than a bug.
https://wiki.blender.org/wiki/Communication/Contact#User_Feedback_and_Requests

Agree this is more a feature request than a bug. https://wiki.blender.org/wiki/Communication/Contact#User_Feedback_and_Requests

Sign in to join this conversation.