Re: How to Lock Down complete access ? Even if I setup the Lock Down Policy still the Print to File exposes all drives.

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Vera Noest [MVP] (vera.noest_at_remove-this.hem.utfors.se)
Date: 05/14/04 

Date: Fri, 14 May 2004 15:31:17 -0700

Hiding drives is only a cosmetic thing, and does not work in a lot
of standard dialog boxes, as you have noticed.
NTFS permissions on the file system are needed to complement your
GPO settings. Users should not have Write permissions on files and
folders which they are not supposed to change.

 --
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
http://hem.fyristorg.com/vera/IT
 --- please respond in newsgroup, NOT by private email ---

"Anand Ganesh" <anand_ganesh@hotmail.com> wrote in
news:ec4aMdfOEHA.2740@TK2MSFTNGP11.phx.gbl:

> Hi All,
>
> In the Print Dialog box there is a "Print to File" option. How
> to disable this?
>
> The reason is when the Terminal Server client tries to print to
> file, he can simply browse and see all the drives and he can
> also overwrite the files on the Terminal Server.
>
> Even if I setup all the drive restrictions and lock down policy
> this particular dialog allows the user to save file on the
> Server.
>
> Is there anyway to lock down this ?
>
> Any suggestions. Can anyone please help.
>
> Regards
> Anand Ganesh

Relevant Pages

  • Re: Windows Server 2008 TS Error.
    ... You might want to read up about NTFS permissions, ... Here's a nice article by Jeff Pitsch: ... MCSE, CCEA, Microsoft MVP - Terminal Server ... drives and that is through group policy. ...
    (microsoft.public.windows.terminal_services)
  • Re: Group Policy Question in TS Environment
    ... hence the need to restrict the local drives on the workstations, ... classic case of using loopback processing to apply unique user configuration ... > What you can do is create a TS GPO which does allow them access to ... place the Terminal Server in a separate OU ...
    (microsoft.public.windows.terminal_services)
  • Re: Map Local Drive Issue
    ... your redirected local drives are shown as "C on ... Can I map the local drive on my PC to the TerminalServer in the ... the terminal server maps the local drives in this ... to access email, track prospects, and update sales forms (50 or ...
    (microsoft.public.windows.terminal_services)
  • Re: Windows Server 2008 TS Error.
    ... I was able to succesfully Allow log on thourgh Terminal Server right to ... it will still be fairly easy for users to get to those drives. ... Jeff Pitsch wrote on ... you need to add the users to the Remote Desktop User group ...
    (microsoft.public.windows.terminal_services)
  • Re: Client Drive Redirection Issues after Upgrade...Please help....
    ... Performed an upgrade from terminal server 2000 to 2003. ... Remote Desktop Users group to allow them login. ... but to not see local redirected drives even if checking the option in ... if a user is a member of the terminal ...
    (microsoft.public.win2000.termserv.clients)