COMMAND

    Novell Groupwise Client

SYSTEMS AFFECTED

    Novell Groupwise Client gw5.5epsp2

PROBLEM

    Adam  Gray  found  following.   With  zen  polices  or  NT Polices
    installed properly  on a  windows machine  GroupWise can  view the
    file system while policies do  not allow local access to  view the
    files system  of local  or remote  drives.   The GroupWise  client
    allows permission to see and call files on all drives.  This  does
    not change or  proxy the rights  of another user  it simply allows
    them to see what policies should be hiding.

    This problem was caused when Novell used an API that did not check
    with OS policies that have been applied to the user.  This problem
    has been reported and confirmed by Novell Tech Support.

    Lock down a windows workstation with zen or NT Policies so  you're
    not allowed to view local or  remote hard drives.  Open GW.   Open
    new message.  Click  attach.  Type in  the drive letter you  would
    like to view.  You can see the whole drive and files.  This can be
    useful for sending a copy of the local sam file on NT or  browsing
    log files that are on the machine.

SOLUTION

    Contact  Novell  GroupWise  Support  for  a  file fix or GroupWise
    Client release sp3 will fix this issue.