Restricting Drives

[gerrybarnett]

I have set up system Policy to restrict disk drives visible to users to "S:" only. When opening "My Computer" onle S: is visible but in Explorer the C: drives is visible as well. Why is this and is there a way to restrict from Explorer as well?

 

[mdnationwide]

There is a program called 'Folder Guard' which restricts tuns of things in Windows.

http://www.winability.com/

 

[bp1169]

MS has a good article on how to do this. I have it implemented everywhere within my organization. It's fairly straightforward.

http://support.microsoft.com/support/kb/articles/Q242/0/92.ASP

Hope this helps.

 

[ShackDaddy]

You may want to disable the use of explorer. I do this a lot in Terminal Server environments.

David Shackelford

 

[peterve]

if you disable the use of explorer.exe, can you still use a desktop environment under terminal server ?
(I thought the terminal server desktop uses explorer.exe...) ---------------------------------------------------------------------
I have not failed, I've just found 10,000 ways that don't work
---------------------------------------------------------------------
Peter Van Eeckhoutte
peter.ve@pandora.be
*:->* Did this post help? Click below to let me know !

 

[mjbrown]

Desktop does use eplorer.exe. Have you looked into a reg hack to hide all drives you want hidden.
HKCU\software\microsoft\windows\current version\policies\explorer. Create a regD_Word and use the decimal value of the drives you want hidden. There is a utility out there to get this value for you. I can't find it on the net, but I have it on my system. E-mail me and will send it to you. This way I can get you the Readme on it to. You can write a batch file or whatever (we use AutoIt to write a script)and add it to the logon's of the users or make it for everyone and create a unhide drives script to allow admin users to see those drives.
mikebrown123@yahoo.com
Mike Brown CCA

 

[peterve]

There is a difference between hiding disks and restricting access to the disks...

the c: drive can be hidden using the registry, but it is still accessible
the only way of restriction access to the local drives is
- hide them
- enforce NTFS rights (allow administrators and System full control, but don't enable access for your users to certain files
(don't take away all rights or you won't be able to connect anymore... it's a 'trial and error' thing I guess) ---------------------------------------------------------------------
I have not failed, I've just found 10,000 ways that don't work
---------------------------------------------------------------------
Peter Van Eeckhoutte
peter.ve@pandora.be
*:->* Did this post help? Click below to let me know !

 

[mjbrown]

Sorry about my errant post, I work on Citrix and thought I was in that Forum. Mike Brown CCA

 

[peterve]

I believe it has to be configured like this on Citrix as well... altough you can hide the drives, they are still accessible... ---------------------------------------------------------------------
I have not failed, I've just found 10,000 ways that don't work
---------------------------------------------------------------------
Peter Van Eeckhoutte
peter.ve@pandora.be
*:->* Did this post help? Click below to let me know !