Currently I block access to the local C: drive so domain users can't access the hard drive using Server 2003 group policy. Is there a way using group policy to allow users access to 1 folder on the hard drive and block everything else?
Example: Block access to the C: drive and allow access to C:\Program File\Lytec
Thanks
This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.
Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.
If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.
Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.
Save solutions to your questions, answers you’ve discovered through searching plus helpful articles in your personal knowledgebase for easy future access.
Access the answers to your technology questions today.
30-day free trial. Register in 60 seconds.
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.
Try it out and discover for yourself.
30-day free trial. Register in 60 seconds.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
good day
for sure u can
all what u have to do is to logon using administrator account that have access to drive c, go to the folder u need all the user to view, set permision to every one as full controll or modify, and block inharetance for this folder, then greate a shortcut for this folder to the desktop, or mount this folder to a logical partion name or share this folder and map it as a network drive for all users.
hope this will help.
This is why I mentioned the group policy setting. That will work for folders on any computers the GPO would apply to. You just need to be careful as that can have adverse affects if you put the wrong permissions on the wrong folders; like not allowing SYSTEM access to OS files or Denying Everyone access to vital pieces.
-SMFX
Business Accounts
Answer for Membership
by: SMFXPosted on 2006-07-17 at 23:27:17ID: 17128065
Under the group policy, you can Add the folder in Computer Configuration\Windows Settings\Security Settings\File System. At that point you can define NTFS permissions that would allow the users to have access to the specified folder.
Obviously, just be careful that you don't put in an invalid path or group as this will force whatever changes you tell it to. In addition, you won't really be able to change it to something else on the client as this policy will overwrite it.
HTH,
-SMFX