Tek-Tips is the largest IT community on the Internet today!
Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!
-
Congratulations Mike Lewis on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!
To Davenomu
- Thread starter ekke
- Start date
Well, let's start out with some questions.
1. Were you able to create the ADM file?
2. Were you able to load the ADM file in System Policy Editor (without any errors)?
3. Did you see the options in System Policy editor to hide drives.
4. Did you already have a system policy in place before you used the ADM file I sent?
5. What drives are you trying to Hide?
Dave Namou, MCSE CCEA
1. Were you able to create the ADM file?
2. Were you able to load the ADM file in System Policy Editor (without any errors)?
3. Did you see the options in System Policy editor to hide drives.
4. Did you already have a system policy in place before you used the ADM file I sent?
5. What drives are you trying to Hide?
Dave Namou, MCSE CCEA
- Thread starter
- #3
Thanks for the reply.
I was not using any policy to remove drives before and
yes i was able to create the adm file and load in to the GP without any problems and i could see the policy and be able to select the drives i do not want to see.
but when i load my citrix client the "clients" drives do not get mapped and i still can see the drives i selected not to see.
the drives im trying to remove is M,N,O,R.
Ekke
I was not using any policy to remove drives before and
yes i was able to create the adm file and load in to the GP without any problems and i could see the policy and be able to select the drives i do not want to see.
but when i load my citrix client the "clients" drives do not get mapped and i still can see the drives i selected not to see.
the drives im trying to remove is M,N,O,R.
Ekke
A few more questions:
1. Do you use System Policies for anything else on that server other than hiding drives?
- I'm trying to pinpoint the problem to see if it's the template or your system policy that isn't working.
2. When you saved your policy, where is the exact path you saved it to, and what name did you give the policy?
-Policies have to be saved in the NetLoggon Share on the PDC and all BDC's of a Domain.
-They also must be named NTCONFIG.POL
-In the Case of Terminal Server, this is usually modified so that it can be saved somewhere else under a different name. That way the policy only applies to the Terminal Servers.
3. This might be an obvious question but did you create a "Group" within your policy that matches a valid group in your Domain? And is the user your testing with part of that group?
-The Group must be a Global Group, policies do not work with Local Groups.
4. Is your server part of a Domain?
Sorry about all the questions, but Policies are a tricky thing if you miss just one step. Let me know how familiar you are with Policies as well, maybe I just have to explain the exact procedures to setting them up.
By the way, the policy template I sent you did not have the option to hide M,N,O,R. I'm not sure if you created it or not so here is your new template to hide M,N,O,R.
The number in blue is the key value you need in the template to hide MNOR.
CLASS USER
CATEGORY !!Hide
CATEGORY !!Restrictions
POLICY !!HideDrives
KEYNAME Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
PART !!HideDrivesOptions DROPDOWNLIST
VALUENAME "NoDrives"
ITEMLIST
Name !!HideDrives~all VALUE NUMERIC 67108863
NAME !!HideDrives~MNOR VALUE NUMERIC 159744
END ITEMLIST
REQUIRED
END PART
PART !!DriveRestrictions_Tip1 TEXT END PART
PART !!DriveRestrictions_Tip2 TEXT END PART
PART !!DriveRestrictions_Tip3 TEXT END PART
END POLICY
END CATEGORY
END CATEGORY
[strings]
Hide="Hide Drives"
Restrictions="Drive Restrictions"
HideDrives="Hide (or show) the selected drives"
HideDrivesOptions="Choose from the following configuration:"
HideDrives~all="All Drives are hidden"
HideDrives~MNOR="Hide Drives M: N: O: and R:"
DriveRestrictions_Tip1=" Note: This is a sample policy that conflits with any Hide Drives"
DriveRestrictions_Tip2=" policy defined in common.adm and/or in the ZAK. It is provided to"
DriveRestrictions_Tip3=" define common drive configurations in MetaFrame."
Dave Namou, MCSE CCEA
1. Do you use System Policies for anything else on that server other than hiding drives?
- I'm trying to pinpoint the problem to see if it's the template or your system policy that isn't working.
2. When you saved your policy, where is the exact path you saved it to, and what name did you give the policy?
-Policies have to be saved in the NetLoggon Share on the PDC and all BDC's of a Domain.
-They also must be named NTCONFIG.POL
-In the Case of Terminal Server, this is usually modified so that it can be saved somewhere else under a different name. That way the policy only applies to the Terminal Servers.
3. This might be an obvious question but did you create a "Group" within your policy that matches a valid group in your Domain? And is the user your testing with part of that group?
-The Group must be a Global Group, policies do not work with Local Groups.
4. Is your server part of a Domain?
Sorry about all the questions, but Policies are a tricky thing if you miss just one step. Let me know how familiar you are with Policies as well, maybe I just have to explain the exact procedures to setting them up.
By the way, the policy template I sent you did not have the option to hide M,N,O,R. I'm not sure if you created it or not so here is your new template to hide M,N,O,R.
The number in blue is the key value you need in the template to hide MNOR.
CLASS USER
CATEGORY !!Hide
CATEGORY !!Restrictions
POLICY !!HideDrives
KEYNAME Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
PART !!HideDrivesOptions DROPDOWNLIST
VALUENAME "NoDrives"
ITEMLIST
Name !!HideDrives~all VALUE NUMERIC 67108863
NAME !!HideDrives~MNOR VALUE NUMERIC 159744
END ITEMLIST
REQUIRED
END PART
PART !!DriveRestrictions_Tip1 TEXT END PART
PART !!DriveRestrictions_Tip2 TEXT END PART
PART !!DriveRestrictions_Tip3 TEXT END PART
END POLICY
END CATEGORY
END CATEGORY
[strings]
Hide="Hide Drives"
Restrictions="Drive Restrictions"
HideDrives="Hide (or show) the selected drives"
HideDrivesOptions="Choose from the following configuration:"
HideDrives~all="All Drives are hidden"
HideDrives~MNOR="Hide Drives M: N: O: and R:"
DriveRestrictions_Tip1=" Note: This is a sample policy that conflits with any Hide Drives"
DriveRestrictions_Tip2=" policy defined in common.adm and/or in the ZAK. It is provided to"
DriveRestrictions_Tip3=" define common drive configurations in MetaFrame."
Dave Namou, MCSE CCEA
- Thread starter
- #5
Hi Dave.
I just tried the new hide drives you sent me and it worked like a charm.
it seems like the value numeric number i typed into the other one i edited was wrong, idont no how you calculated the number but mine was nowhere near yours.
So ijust want to say Thank's.
And while im writing you i cant access the CMC i keep getting acces denied no permissons. tried another way as describe in citrix's own faq by logging on localy but keep getting the same answer.
any idea?
Ekke
I just tried the new hide drives you sent me and it worked like a charm.
it seems like the value numeric number i typed into the other one i edited was wrong, idont no how you calculated the number but mine was nowhere near yours.
So ijust want to say Thank's.
And while im writing you i cant access the CMC i keep getting acces denied no permissons. tried another way as describe in citrix's own faq by logging on localy but keep getting the same answer.
any idea?
Ekke
Ekke,
Are you logging on locally as Administrator? Sounds like a stupid question, but if you created a local ID and granted it Domain privelages and are logging in using that rather than Administrator, it won't allow you access unless you have also set that up within the CMC....
Are you logging on locally as Administrator? Sounds like a stupid question, but if you created a local ID and granted it Domain privelages and are logging in using that rather than Administrator, it won't allow you access unless you have also set that up within the CMC....
- Status
Similar threads
- Locked
- Question
- Locked
- Question
- Locked
- Question