I'm trying to setup some servers to deliver IE10 for a large group of users on 2012 RDS.
These servers will allow the user to go to their webmail (Yahoo, Gmail, etc) which they cannot do internally at their desk.
My problem is preventing the users from browsing to the network shares using UNC names when in the file attachment screens of these email sites.
I have already set things up so that they cannot put a UNC path in the address bar, file File Open and Save as are disabled. Policy is set to hide all drives from view and Network Discovery is disabled.
I've tried using the firewall to block outgoing traffic for IE on ports 137-138 and 445 but have not been able to get this last hurdle cleared.
What am I missing?
Any ideas would be appreciated.
Thanks!