Re: User rights in TS 2003

or use the policies for restricting access to drives.

And sorry for being singleminded but in my experiences, policies is the most
efficient way to do these things if you manage more than 1 TS server.

--
best regards

René "LamerSmurf" Vester
CCA PS 3.0


"Vera Noest [MVP]" <Vera.Noest@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:Xns96999AC111605veranoesthemutforsse@xxxxxxxxxxxxxxxx
> You can hide any combination of drives that you want with a Group
> Policy. Here's the documentation about how to create a custom .adm
> template to do so:
>
> 231289 - Using Group Policy Objects to Hide Specified Drives in My
> Computer for Windows 2000
> http://support.microsoft.com/?kbid=231289
>
> Hiding drives has normally no influence on what users can or can't
> do. It's just a cosmetic feature, and in itself, it doesn not
> provide any security at all. So if your goal is security, you will
> have to use NTFS permissions on the file system as well.
>
> _________________________________________________________
> Vera Noest
> MCSE, CCEA, Microsoft MVP - Terminal Server
> TS troubleshooting: http://ts.veranoest.net
> *----------- Please reply in newsgroup -------------*
>
> "Stefan Persson" <stefan.persson**SPAMOFF**wsiwebdesign.se> wrote
> on 20 jul 2005:
>
>> Hi,
>>
>> You can only hide drives A-D via group policy so I'm looking for
>> a way to hide the rest too. I know there is a registry hack but
>> I will only use that as a last resort. I can't make the All
>> Users under documents and settings hidden for example, because
>> then the users can't use the stuff in there. I can't seem to
>> solve it with NTFS rights either.
>>
>> "René Vester" <rene@xxxxxxxxx> skrev i meddelandet
>> news:ee5QPkQjFHA.4000@xxxxxxxxxxxxxxxxxxxxxxx
>>> Hey Stefan,
>>>
>>> You should take a look at the grouppolicies, either local
>>> policies or in your active directory domain, if you have one.
>>>
>>> they provide ways to hide drives, and the likes :)
>>>
>>> --
>>> best regards
>>>
>>> René "LamerSmurf" Vester
>>> CCA PS 3.0
>>>
>>>
>>> "Stefan Persson" <stefan.persson**SPAMOFF**wsiwebdesign.se>
>>> wrote in message
>>> news:%23q1DpZFjFHA.3436@xxxxxxxxxxxxxxxxxxxxxxx
>>>>I have most things locked down on my TS 2003 server except for
>>>>a few things that one of you might be able to help me with:
>>>>
>>>> 1. The documents and settings for all users except
>>>> administrator are redirected to the E: drive. I want to hide
>>>> documents and settings in Windows Explorer for regular users
>>>> so they can only see their own "My Documents" folder in
>>>> Windows Explorer.
>>>>
>>>> 2. I have 1 CD drive and 1 DVD drive as G: and H: drives. I
>>>> want to hide these in windows explorer and prevent access to
>>>> them in any way.


.

Relevant Pages

  • Re: Local policy, IE and SP2...
    ... I must mention here that I rarely use GPEdit and almost always I change the Explorer or System policies through registry. ... The same I did for those tests I mentioned for SP2. ... this is true - those policies will not allow you to lock user accounts from launching applications from hidden drives. ...
    (microsoft.public.windowsxp.embedded)
  • Re: XP in an NT Domain Issue - policy problems and drive mapping issues
    ... 1.)In NT I created a blank policy withing Policy Editor and saved this ... XP looks for policies to my new directory. ... Now I can make whatever changes are needed to get my drives to ... > on ?Primary Domain Controller'. ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Map a network drive for all users
    ... placed the TS icon in it and applied required policies to it. ... toolbars" (before that, I unchecked to hide the Address Bar and the Standard ... I got that situation sorted out through adding a login script in GP. ... drives, map a network drive and use IE in explorer ...
    (microsoft.public.windows.terminal_services)
  • Re: Question about Group Policies in XP.
    ... There is an option under both Computer configuration and User configuration ... cause I don't know enough about it but I have converted the drives to NTFS. ... >> policies under the user account but if I have to set these ... Should I give the user account administrator rights ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Made bad mistake
    ... drive and then change the NTFS permissions by right-clicking ... into any of the drives]. ... You can also attempt to apply roll out this permission via a Group Policy ...
    (microsoft.public.win2000.security)
Loading