Re: User rights in TS 2003

You can hide any combination of drives that you want with a Group
Policy. Here's the documentation about how to create a custom .adm
template to do so:

231289 - Using Group Policy Objects to Hide Specified Drives in My
Computer for Windows 2000
http://support.microsoft.com/?kbid=231289

Hiding drives has normally no influence on what users can or can't
do. It's just a cosmetic feature, and in itself, it doesn not
provide any security at all. So if your goal is security, you will
have to use NTFS permissions on the file system as well.

_________________________________________________________
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
TS troubleshooting: http://ts.veranoest.net
*----------- Please reply in newsgroup -------------*

"Stefan Persson" <stefan.persson**SPAMOFF**wsiwebdesign.se> wrote
on 20 jul 2005:

> Hi,
>
> You can only hide drives A-D via group policy so I'm looking for
> a way to hide the rest too. I know there is a registry hack but
> I will only use that as a last resort. I can't make the All
> Users under documents and settings hidden for example, because
> then the users can't use the stuff in there. I can't seem to
> solve it with NTFS rights either.
>
> "René Vester" <rene@xxxxxxxxx> skrev i meddelandet
> news:ee5QPkQjFHA.4000@xxxxxxxxxxxxxxxxxxxxxxx
>> Hey Stefan,
>>
>> You should take a look at the grouppolicies, either local
>> policies or in your active directory domain, if you have one.
>>
>> they provide ways to hide drives, and the likes :)
>>
>> --
>> best regards
>>
>> René "LamerSmurf" Vester
>> CCA PS 3.0
>>
>>
>> "Stefan Persson" <stefan.persson**SPAMOFF**wsiwebdesign.se>
>> wrote in message
>> news:%23q1DpZFjFHA.3436@xxxxxxxxxxxxxxxxxxxxxxx
>>>I have most things locked down on my TS 2003 server except for
>>>a few things that one of you might be able to help me with:
>>>
>>> 1. The documents and settings for all users except
>>> administrator are redirected to the E: drive. I want to hide
>>> documents and settings in Windows Explorer for regular users
>>> so they can only see their own "My Documents" folder in
>>> Windows Explorer.
>>>
>>> 2. I have 1 CD drive and 1 DVD drive as G: and H: drives. I
>>> want to hide these in windows explorer and prevent access to
>>> them in any way.
.

Relevant Pages

  • Local Group Policy - Novell mapped drives problem
    ... file name length of Novell mapped drives. ... Policy, all drive mappings done via server- ...
    (microsoft.public.windowsxp.security_admin)
  • Re: GPO not working (yes, another post)
    ... For the first part of the answer, I'm going to take group policies out of the equation for a moment and just give a brief overview of how Windows "sees" mapped drives. ... Now I'm not just talking about preferences here....the following applies to all group policy settings. ... Now it won't matter which machine the user logs into, that setting will apply because it is a user setting. ...
    (microsoft.public.windows.server.sbs)
  • Re: GPO not working (yes, another post)
    ... For the first part of the answer, I'm going to take group policies out of the equation for a moment and just give a brief overview of how Windows "sees" mapped drives. ... Now I'm not just talking about preferences here....the following applies to all group policy settings. ... Now it won't matter which machine the user logs into, that setting will apply because it is a user setting. ... I found that if I linked the GPO to the ...
    (microsoft.public.windows.server.sbs)
  • RE: How to disable all floppy drives on the network
    ... How to disable all floppy drives on the network ... If you can disable the "Floppy Disk" driver through a policy, ... Note that disabling the floppy driver doesn't prevent people from sticking ...
    (Focus-Microsoft)
  • Re: Mapped F Drive - group policy update problem
    ... again the drives maps correctly. ... users save work locally(not our policy) and on the network. ... If this setting is disabled or not configured (Windows 2000 Server Family ... set to map in the user properties of ...
    (microsoft.public.windows.server.active_directory)