Re: Group Policies & Local Hard Drives

While I agree with those who say that user education is important,
the education has to be backed with teeth. You can't take chances these days
that the education will work. I have started using group policies to
restrict access to anything except the mapped drives in the logon script.
Under User Configuration/ Administrative Templates/ Windows Components/
Windows Explorer, look at "Hide these drives" and "Prevent Access to these
drives." The former removes the listed drives from view in Explorer (My
Computer) and the latter actually prevents any access to them. You can use
either or both of these policies, and you don't have to go with the canned
choices. The process is ridiculous and tedious, but necessary and effective.

I make sure that all my users are found under "SBS Users" and all my
workstations are found under "SBS Computers" in Active Directory. I then
apply a workstation policy to the workstations (disabling the user half of
the policy) and a user policy to the users (disabling the computer half).
This clearly implements my policy. See the article below for more details.

http://support.microsoft.com/kb/q231289/

"cmjkeegan" <cmjkeegan@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:9D94D35D-8121-4BAB-83C9-A51FF4DB03B2@xxxxxxxxxxxxxxxx
How can I restrict access to local hard drives?

I am running SBS2003 Standard with XP Pro sp2 clients.

Is there a way (using group policies or otherwise) to restrict access to
local hard drives?

Some of my users are filling up their local drives with junk and I would
like to be able to stop them.

Cheers

Chris
--
IT & Network Coordinator


.

Relevant Pages

  • Re: Restrict Drive Access in Terminal Server 2003
    ... I notice that via Group Policy I can restrict access to drives A,B,C,D ... VALUENAME "NoDrives" ...
    (microsoft.public.windows.terminal_services)
  • Hide & restrict access to drives only for users, no AD!
    ... I tried it by creating a policy using poledit, but I cannot make it work. ... Does anybody know how could I hide drives and restrict access to them in a W2K TS in a workgroup? ...
    (microsoft.public.win2000.security)
  • Local Group Policy - Novell mapped drives problem
    ... file name length of Novell mapped drives. ... Policy, all drive mappings done via server- ...
    (microsoft.public.windowsxp.security_admin)
  • Re: GPO not working (yes, another post)
    ... For the first part of the answer, I'm going to take group policies out of the equation for a moment and just give a brief overview of how Windows "sees" mapped drives. ... Now I'm not just talking about preferences here....the following applies to all group policy settings. ... Now it won't matter which machine the user logs into, that setting will apply because it is a user setting. ...
    (microsoft.public.windows.server.sbs)
  • Re: GPO not working (yes, another post)
    ... For the first part of the answer, I'm going to take group policies out of the equation for a moment and just give a brief overview of how Windows "sees" mapped drives. ... Now I'm not just talking about preferences here....the following applies to all group policy settings. ... Now it won't matter which machine the user logs into, that setting will apply because it is a user setting. ... I found that if I linked the GPO to the ...
    (microsoft.public.windows.server.sbs)
Loading