Re: User rights in TS 2003

Thanks, I will check it out. I can't seem to lock that folder down with NTFS
rights though, the system won't show the icons in the All Users folder for
the users if I change the remove the read/list right. What I want to achieve
is to lock everything down except the users My Documents folder but still
let the users have the right to run applications and use the stuff under All
Users.

"Vera Noest [MVP]" <Vera.Noest@xxxxxxxxxxxxxxxxxxxxxxxxx> skrev i
meddelandet news:Xns96999AC111605veranoesthemutforsse@xxxxxxxxxxxxxxxx
> You can hide any combination of drives that you want with a Group
> Policy. Here's the documentation about how to create a custom .adm
> template to do so:
>
> 231289 - Using Group Policy Objects to Hide Specified Drives in My
> Computer for Windows 2000
> http://support.microsoft.com/?kbid=231289
>
> Hiding drives has normally no influence on what users can or can't
> do. It's just a cosmetic feature, and in itself, it doesn not
> provide any security at all. So if your goal is security, you will
> have to use NTFS permissions on the file system as well.
>
> _________________________________________________________
> Vera Noest
> MCSE, CCEA, Microsoft MVP - Terminal Server
> TS troubleshooting: http://ts.veranoest.net
> *----------- Please reply in newsgroup -------------*
>
> "Stefan Persson" <stefan.persson**SPAMOFF**wsiwebdesign.se> wrote
> on 20 jul 2005:
>
>> Hi,
>>
>> You can only hide drives A-D via group policy so I'm looking for
>> a way to hide the rest too. I know there is a registry hack but
>> I will only use that as a last resort. I can't make the All
>> Users under documents and settings hidden for example, because
>> then the users can't use the stuff in there. I can't seem to
>> solve it with NTFS rights either.
>>
>> "René Vester" <rene@xxxxxxxxx> skrev i meddelandet
>> news:ee5QPkQjFHA.4000@xxxxxxxxxxxxxxxxxxxxxxx
>>> Hey Stefan,
>>>
>>> You should take a look at the grouppolicies, either local
>>> policies or in your active directory domain, if you have one.
>>>
>>> they provide ways to hide drives, and the likes :)
>>>
>>> --
>>> best regards
>>>
>>> René "LamerSmurf" Vester
>>> CCA PS 3.0
>>>
>>>
>>> "Stefan Persson" <stefan.persson**SPAMOFF**wsiwebdesign.se>
>>> wrote in message
>>> news:%23q1DpZFjFHA.3436@xxxxxxxxxxxxxxxxxxxxxxx
>>>>I have most things locked down on my TS 2003 server except for
>>>>a few things that one of you might be able to help me with:
>>>>
>>>> 1. The documents and settings for all users except
>>>> administrator are redirected to the E: drive. I want to hide
>>>> documents and settings in Windows Explorer for regular users
>>>> so they can only see their own "My Documents" folder in
>>>> Windows Explorer.
>>>>
>>>> 2. I have 1 CD drive and 1 DVD drive as G: and H: drives. I
>>>> want to hide these in windows explorer and prevent access to
>>>> them in any way.


.

Relevant Pages

  • Re: Utility/report for effective NTFS rights for a single user/group?
    ... that can determine the effective NTFS rights for a user or a group? ... Technically Rights and Permissions are two distinct things in NT-class ... simplistic in that you have to evaluate each folder individually. ...
    (microsoft.public.windows.server.general)
  • Re: Folder views for NTFS permissions
    ... seperate drive letter for the Users folder and then another drive ... Is there a way to do this in NTFS without mapping separate drives? ... and "ntfs permissions" for some more specific topics. ...
    (comp.os.ms-windows.nt.admin.security)
  • Re: The Compressed (zipped) Folder is invalid or corrupted
    ... About 60 gig of data was residing in a normal folder ... To compress a file or folder on an NTFS drive ... You can only use NTFS compression for files and folders on drives ... Files and folders that are compressed using NTFS compression cannot be ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Err Msg: "550 : Access Is Denied" When Attempting FTP PUT Command
    ... hang on, that last statement - you've checked the NTFS rights on the folder, ... NTFS permissions allow your user account to write under 'home directory'? ... Microsoft GTSC, IIS ... This posting is provided "AS IS" with no warranties, and confers no rights. ...
    (microsoft.public.inetserver.iis.ftp)
  • Re: Norton doesnt (or cant) scan "System volume information..." path?
    ... Connected a FAT32 drive to a system with an NTFS Win-XP pro drive ... do any of those things with the C:\system volume information\ folder. ... apparently Norton will intercept all files accessed from this tree and ... > Fat 32 and NTFS drives. ...
    (microsoft.public.windowsxp.general)