Re: User rights in TS 2003

The users need access to the All Users catalog to display the icons for
example so how do I lock it down with a policy and still make them able to
read some content?

Thanks for your reply.

"René Vester" <rene@xxxxxxxxx> skrev i meddelandet
news:%23w3n4ETjFHA.2152@xxxxxxxxxxxxxxxxxxxxxxx
> or use the policies for restricting access to drives.
>
> And sorry for being singleminded but in my experiences, policies is the
> most efficient way to do these things if you manage more than 1 TS server.
>
> --
> best regards
>
> René "LamerSmurf" Vester
> CCA PS 3.0
>
>
> "Vera Noest [MVP]" <Vera.Noest@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
> news:Xns96999AC111605veranoesthemutforsse@xxxxxxxxxxxxxxxx
>> You can hide any combination of drives that you want with a Group
>> Policy. Here's the documentation about how to create a custom .adm
>> template to do so:
>>
>> 231289 - Using Group Policy Objects to Hide Specified Drives in My
>> Computer for Windows 2000
>> http://support.microsoft.com/?kbid=231289
>>
>> Hiding drives has normally no influence on what users can or can't
>> do. It's just a cosmetic feature, and in itself, it doesn not
>> provide any security at all. So if your goal is security, you will
>> have to use NTFS permissions on the file system as well.
>>
>> _________________________________________________________
>> Vera Noest
>> MCSE, CCEA, Microsoft MVP - Terminal Server
>> TS troubleshooting: http://ts.veranoest.net
>> *----------- Please reply in newsgroup -------------*
>>
>> "Stefan Persson" <stefan.persson**SPAMOFF**wsiwebdesign.se> wrote
>> on 20 jul 2005:
>>
>>> Hi,
>>>
>>> You can only hide drives A-D via group policy so I'm looking for
>>> a way to hide the rest too. I know there is a registry hack but
>>> I will only use that as a last resort. I can't make the All
>>> Users under documents and settings hidden for example, because
>>> then the users can't use the stuff in there. I can't seem to
>>> solve it with NTFS rights either.
>>>
>>> "René Vester" <rene@xxxxxxxxx> skrev i meddelandet
>>> news:ee5QPkQjFHA.4000@xxxxxxxxxxxxxxxxxxxxxxx
>>>> Hey Stefan,
>>>>
>>>> You should take a look at the grouppolicies, either local
>>>> policies or in your active directory domain, if you have one.
>>>>
>>>> they provide ways to hide drives, and the likes :)
>>>>
>>>> --
>>>> best regards
>>>>
>>>> René "LamerSmurf" Vester
>>>> CCA PS 3.0
>>>>
>>>>
>>>> "Stefan Persson" <stefan.persson**SPAMOFF**wsiwebdesign.se>
>>>> wrote in message
>>>> news:%23q1DpZFjFHA.3436@xxxxxxxxxxxxxxxxxxxxxxx
>>>>>I have most things locked down on my TS 2003 server except for
>>>>>a few things that one of you might be able to help me with:
>>>>>
>>>>> 1. The documents and settings for all users except
>>>>> administrator are redirected to the E: drive. I want to hide
>>>>> documents and settings in Windows Explorer for regular users
>>>>> so they can only see their own "My Documents" folder in
>>>>> Windows Explorer.
>>>>>
>>>>> 2. I have 1 CD drive and 1 DVD drive as G: and H: drives. I
>>>>> want to hide these in windows explorer and prevent access to
>>>>> them in any way.
>
>


.

Relevant Pages

  • Local Group Policy - Novell mapped drives problem
    ... file name length of Novell mapped drives. ... Policy, all drive mappings done via server- ...
    (microsoft.public.windowsxp.security_admin)
  • Re: GPO not working (yes, another post)
    ... For the first part of the answer, I'm going to take group policies out of the equation for a moment and just give a brief overview of how Windows "sees" mapped drives. ... Now I'm not just talking about preferences here....the following applies to all group policy settings. ... Now it won't matter which machine the user logs into, that setting will apply because it is a user setting. ...
    (microsoft.public.windows.server.sbs)
  • Re: GPO not working (yes, another post)
    ... For the first part of the answer, I'm going to take group policies out of the equation for a moment and just give a brief overview of how Windows "sees" mapped drives. ... Now I'm not just talking about preferences here....the following applies to all group policy settings. ... Now it won't matter which machine the user logs into, that setting will apply because it is a user setting. ... I found that if I linked the GPO to the ...
    (microsoft.public.windows.server.sbs)
  • RE: How to disable all floppy drives on the network
    ... How to disable all floppy drives on the network ... If you can disable the "Floppy Disk" driver through a policy, ... Note that disabling the floppy driver doesn't prevent people from sticking ...
    (Focus-Microsoft)
  • Re: Mapped F Drive - group policy update problem
    ... again the drives maps correctly. ... users save work locally(not our policy) and on the network. ... If this setting is disabled or not configured (Windows 2000 Server Family ... set to map in the user properties of ...
    (microsoft.public.windows.server.active_directory)