Solved

Group Policy C: drive restriction

Posted on 2006-07-17
4
4,598 Views
Last Modified: 2012-05-05
Currently I block access to the local C: drive so domain users can't access the hard drive using Server 2003 group policy.  Is there a way using group policy to allow users access to 1 folder on the hard drive and block everything else?  

Example:  Block access to the C: drive and allow access to C:\Program File\Lytec

Thanks
0
Comment
Question by:cgriffith4
  • 2
4 Comments
 
LVL 3

Expert Comment

by:SMFX
ID: 17128065
Under the group policy, you can Add the folder in Computer Configuration\Windows Settings\Security Settings\File System.  At that point you can define NTFS permissions that would allow the users to have access to the specified folder.

Obviously, just be careful that you don't put in an invalid path or group as this will force whatever changes you tell it to.  In addition, you won't really be able to change it to something else on the client as this policy will overwrite it.

HTH,
-SMFX
0
 

Accepted Solution

by:
ahm_khattab earned 250 total points
ID: 17128165
good day

for sure u can

all what u have to do is to logon using administrator account that have access to drive c, go to the folder u need all the user to view, set permision to every one as full controll or modify, and block inharetance for this folder, then greate a shortcut for this folder to the desktop, or mount this folder to a logical partion name or share this folder and map it as a network drive for all users.

hope this will help.
0
 

Expert Comment

by:AnthVXNE
ID: 20754476
thats fine if you run one pc, but if you run 3,000 wouldn't really want to go around each and everyone to do that.

0
 
LVL 3

Expert Comment

by:SMFX
ID: 20770423
This is why I mentioned the group policy setting.  That will work for folders on any computers the GPO would apply to.  You just need to be careful as that can have adverse affects if you put the wrong permissions on the wrong folders; like not allowing SYSTEM access to OS files or Denying Everyone access to vital pieces.

-SMFX
0

Featured Post

Free Tool: Path Explorer

An intuitive utility to help find the CSS path to UI elements on a webpage. These paths are used frequently in a variety of front-end development and QA automation tasks.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Windows 10 is here and for most admins this means frustration and challenges getting that first working Windows 10 image. As in my previous sysprep articles, I've put together a simple help guide to get you through this process. The aim is to achiev…
I use more than 1 computer in my office for various reasons. Multiple keyboards and mice take up more than just extra space, they make working a little more complicated. Using one mouse and keyboard for all of my computers makes life easier. This co…
This is used to tweak the memory usage for your computer, it is used for servers more so than workstations but just be careful editing registry settings as it may cause irreversible results. I hold no responsibility for anything you do to the regist…
Hi friends,  in this video  I'll show you how new windows 10 user can learn the using of windows 10. Thank you.

807 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question