Re: Prevent write access to drive C

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

Hi Burhan,

If you are trying to lock down permissions on the file system itself,
you can do this within a GPO. Under Computer Configuration, Windows
Settings, Security Settings, File System, you can set permissions for
any folder. There are many security templates out there that can
assist in this too. I persoanlly like the ones at the NSA website:

http://www.nsa.gov/snac/downloads_os.cfm?MenuID=scg10.3.1.1

I recommend you thoroughly test this BEFORE you deploy any of these
though as they are very locked down. As some others have stated here
you can break Windows by blanket denying writes to the C drive.

Jaime Halscott
Lead Systems Engineer
ScriptLogic Corporation
http://www.scriptlogic.com

.

Relevant Pages

  • Re: Permissions on filesystem via Group policy
    ... can use the Resultant Set of Policy mmc snapin to see exactly what Group ... you want to disable "inherited permissions" in the advanced page if you only ... > Right-click File System and press Add File. ... Use the security settings of that GPO to specify ...
    (microsoft.public.windows.group_policy)
  • Re: Problem Connecting to Windows 2000 Pro Share
    ... Computer Configuration, Windows Settings, Security Settings, Local Policies, Security Options. ... Let Everyone permissions apply to anonymous users ... Network Access: Shares that can be access anonymously. ...
    (microsoft.public.windowsxp.security_admin)
  • RE: DELETING FILES
    ... different security settings on the NTFS file system. ... Use a free NTFS to DOS reader to copy the files to a FAT32 file system. ... This will effectively strip the various permissions from the files. ...
    (microsoft.public.windowsxp.general)
  • Re: ** Encryption problem **
    ... NO file system is protected against physical breach (unless encryption is ... However, NTFS permissions are ... The SIDs used under the old instance of Windows won't ... have to use EFS to protect your sensitive data to prevent someone from ...
    (microsoft.public.windowsxp.general)
  • Re: Limited account access right
    ... Yes, there are security settings, but you may be confusing policies with ... What you are encountering is a permissions issue, ... Set, View, Change, or Remove File and Folder Permissions in Windows ... But when in the limited account and trying to run the .mdb file it comes ...
    (microsoft.public.windowsxp.newusers)