Restrict a Remote Desktop user to 1 directory 1

[mikelawrence]

I want to restrict a particular user to only see one particular directory when they log on. They will be logging on through Remote Desktop. Now when they logon they see the root directory and can go into any folder. I know i sound gormless but i think it is because there is a group of everyone with privildges to all the directories. As i don't know much about Windows 2003 i don't want to mess around unnecessarily so wondered if i could set a default direcory that this particular user would be directed to when they logon and which they could not leave.

Any advice would be warmly welcomed

thanks

mike

 

[acl03]

What do you mean "see" when they log on.

I understand your questions as this...you have a particular folder that you want remote desktop users to have access to, but you want access denied when they try to navigate to a subfolder.

Is that correct? What about the user's profile (desktop, my docs, etc). By default users can access those too, is that ok?


Thanks,
Andrew

Hard work often pays off over time, but procrastination pays off right now!

 

[mikelawrence]

Thanks for the reply. Ideally when somebody logs on they would only see their own directory and sub directory so they would not see all the directories on the root directory but otherwise if that is not straightforward then stopping them from viewing directories would be fine so for eg if my server had c drive of
c:\data
c:\programs
c:\websites
c:\others\imagestuff
etc

i would ideally want to specify that a particular logon would only be able to access c:\others\imagestuff. So ideally no desktop etc but that would not be a big issue if they did see desktop etc.

thanks

mike

 

[acl03]

If you just make the users standard "users" of the server, as opposed to "Power User" or "Administrator", they should not have rights to anything in c:\ except their profile.

You could right-click the folder to which you want to allow them access, click the security tab and add them with whatever rights you want. The problem is, a user needs rights in order to traverse to this folder.

You could create a shortcut to this folder and put it in their My Documents and/or Desktop that would jump them right there, eliminating the need to traverse there.


PS. I had to look up the word "gormless" after reading your first post - I might have to add that to my repertoire.

Thanks,
Andrew

Hard work often pays off over time, but procrastination pays off right now!