Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations biv343 on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

GPO - Mapped drive 1

Status
Not open for further replies.

KRPGroup

MIS
Jun 22, 2005
317
CA
Is there a way to have a workstation map a drive to a server but not allow the user to copy data down to the local drive. Assuming that the applications are on their local drive and they'll need to access the data files with the local applications.

Also can you disallow a user from manually mapping a drive to a server but from a GPO or other means map only drives that are setup for the user.
 
I think you need to explain your senario better. Are you looking to redirect the users My Documents folder? Or just hide access to local drives?

You can prevent write capability to any drive by giving just read only NTFS permissions. Be careful though, the user will need to have write rights to the temp folder or applications like Word or Excel won't be able to work.

I hope you find this post helpful.

Regards,

Mark

Check out my scripting solutions at
Work SMARTER not HARDER. The Spider's Parlor's Admin Script Pack is a collection of Administrative scripts designed to make IT Administration easier! Save time, get more work done, get the Admin Script Pack.
 
to lock down the user profile, set the profile and desktop settings then make the ntuser.dat to .man
 
If the user has read access to a drive, then you won't be able to stop them copying the data. I don't think there's any way to stop users mapping drives except for the ones you want (I want to do the same thing, but so far haven't found any way of doing it !!) unless maybe you try out Policy Maker

If you do find a way of preveing users from mapping drives, post back as I'd be interested to know too.

Hope this helps

Irish Poetry - Karen O'Connor
Get your Irish Poetry Published
Garten und Landschaftsbau
 
There is an existing policy to prevent the mapping of drives.

User Configuration
Administrative Templates
Windows Components
Windows Explorer
Remove Map Network Drive and Diconnect Network Drive

I hope you find this post helpful.

Regards,

Mark

Check out my scripting solutions at
Work SMARTER not HARDER. The Spider's Parlor's Admin Script Pack is a collection of Administrative scripts designed to make IT Administration easier! Save time, get more work done, get the Admin Script Pack.
 
What I am trying to accomplish is allowing workstations to connect to a server and use the data but stop them from moving/copying client data off the server to their workstations (especially laptops).

And the second question was can I control all mapped drives so that only what is mapped in a GPO/Script will be successful. Not allowing users to manually map their own drives.
Taking away the Map Network drive and CMD prompt options are a few options I know of but sometimes the CMD is handy when trobleshooting with a user remotely.
 
You can use WMI to create an event consumer script that will run all the time. When it detects a mapped drive you can have the event consumer disconnect the newly mapped drive.

Go up on Amazon.com and do a search for "Ed Wilson WMI" and buy that book which has the sample scripts you need to get the job done. Make sure you read the book reviews on Amazon, I posted a review which outlines a crucial line of code missing from the printed book, I got the update directly from the author.

If a user has read access to a folder, then they can copy any file. The only way to stop them from saving is to lock down the laptop or workstation and not give the user write rights.

I hope you find this post helpful.

Regards,

Mark

Check out my scripting solutions at
Work SMARTER not HARDER. The Spider's Parlor's Admin Script Pack is a collection of Administrative scripts designed to make IT Administration easier! Save time, get more work done, get the Admin Script Pack.
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top