How To Disable Drive On Server Citrix (Can Not See)

[12122512]

I had problem for citrix client see drive on server.
Please Help.

 

[CitrixEngineer]

Please provide more information - it is not altogether clear what you are trying to achieve.

If you are trying to hide drives, then you need to implement a Group Policy to do this.

I hope this helps

 

[mitchero]

Here's a more difficult puzzle...How can server drives be hidden from users who launch published Office applications running on Win2k? CitrixEngineer made reference in thread #48-56368. I have not found an answer on thin.net yet.

Microsoft articles Q158457,Q278295, and Q231289 do not apply to this situation. They apply only if the apps are run from the desktop.

Any ideas? Is there a third-party tool? I'm waiting to hear back from my Citrix TRM, so if he comes up with a solution I'll post it.

Thanks,
Ron

 

[Ogi]

This has got to be the most asked about subject and I can't believe that no one searches this and other forums!

Ok, first there are three parts to hiding drives, first is hiding and the second is permitting access. Finally, using either the Local Policy or Group Policy to turn this on.

1) To hide a drive, paste the following into notepad

zyxwvutsrqponmlkjihgfedcba
00010000000000000000011110

Now, because you failed to say what you wanted to hide, I've hidden what I think you may want to! All you have to do is place a "1" to hide a drive and "0" to show a drive.

Open calc up into Scientific mode, switch to binary and then paste the second like (all the 0's and 1's) into it. Now press "decimal". Take this number and alter the following from system.adm file:-

POLICY !!NoDrives
EXPLAIN !!NoDrives_Help
PART !!NoDrivesDropdown DROPDOWNLIST NOSORT REQUIRED
VALUENAME "NoDrives"
ITEMLIST
NAME !!ABOnly VALUE NUMERIC 3
NAME !!COnly VALUE NUMERIC 4
NAME !!DOnly VALUE NUMERIC 8
NAME !!ABConly VALUE NUMERIC 7
NAME !!ABCDOnly VALUE NUMERIC 15
NAME !!ALLDrives VALUE NUMERIC 67108863 DEFAULT
; low 26 bits on (1 bit per drive)
NAME !!RestNoDrives VALUE NUMERIC 0
END ITEMLIST
END PART
END POLICY

For speed and ease, you can change the 67108863 number. This will then hide those drives you really want to hide. Should you want to make your own entry, take time out to read this file, you add into the above additional lines, then enter a description near the end of the file.

Now, if you look a bit further in the system.adm file, you'll see that there is a permit drives option. Alter the appropriate number and you can stop users entering "?:" from the open dialog box thus protecting your server even more!

Finally, once you've saved that file, open gpedit.msc from the Start|Run prompt. Now find the "Hide Drives" option. Turn it on and Hide All Drives. Then if required, turn the Permit Option On, should you wish to do this!

You've now hidden this for "ALL" users of your Citrix Server, and yes, that does mean for Administrators. If you want to access your hidden drives, create a desktop shortcut for each other drive.

If you have Group Policies in place, you can place them there for specific groups of users.

Hope that helps,
Carl.

 

[mitchero]

Carl,

The tips that you gave were in the Microsoft Q articles that I referenced and have tried. They only denied access from launching Office applications from a desktop session. The server drives are still accessible from a published Microsoft application like Word, Excel, Outlook, etc.

Anyone else?

 

[Ogi]

What if you do the following:-

Hide the drives
Deny access to the drives

Set the Working Directory to the either:-
The Users Home Drive (not ?:\Documents and Settings\...)
Set the Working Directory to a mapped drive

Cheers,
Carl.

 

[Ogi]

Also, thinking about it once I'd clicked Submit Post, what about moving the Temp Folder away from the ?:\Documents and Settings\....

I know Outlook uses that when you want to Save attachments etc

Cheers,
Carl.