Solved

Group Policy C: drive restriction

Posted on 2006-07-17
4
4,555 Views
Last Modified: 2012-05-05
Currently I block access to the local C: drive so domain users can't access the hard drive using Server 2003 group policy.  Is there a way using group policy to allow users access to 1 folder on the hard drive and block everything else?  

Example:  Block access to the C: drive and allow access to C:\Program File\Lytec

Thanks
0
Comment
Question by:cgriffith4
  • 2
4 Comments
 
LVL 3

Expert Comment

by:SMFX
Comment Utility
Under the group policy, you can Add the folder in Computer Configuration\Windows Settings\Security Settings\File System.  At that point you can define NTFS permissions that would allow the users to have access to the specified folder.

Obviously, just be careful that you don't put in an invalid path or group as this will force whatever changes you tell it to.  In addition, you won't really be able to change it to something else on the client as this policy will overwrite it.

HTH,
-SMFX
0
 

Accepted Solution

by:
ahm_khattab earned 250 total points
Comment Utility
good day

for sure u can

all what u have to do is to logon using administrator account that have access to drive c, go to the folder u need all the user to view, set permision to every one as full controll or modify, and block inharetance for this folder, then greate a shortcut for this folder to the desktop, or mount this folder to a logical partion name or share this folder and map it as a network drive for all users.

hope this will help.
0
 

Expert Comment

by:AnthVXNE
Comment Utility
thats fine if you run one pc, but if you run 3,000 wouldn't really want to go around each and everyone to do that.

0
 
LVL 3

Expert Comment

by:SMFX
Comment Utility
This is why I mentioned the group policy setting.  That will work for folders on any computers the GPO would apply to.  You just need to be careful as that can have adverse affects if you put the wrong permissions on the wrong folders; like not allowing SYSTEM access to OS files or Denying Everyone access to vital pieces.

-SMFX
0

Featured Post

What Security Threats Are You Missing?

Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

Join & Write a Comment

Just about everyone has an old PC laying around.  Ask anyone in the IT industry, whether they are a professional or play in it as a hobby.  From outdated Desktops to cheap "throwaway" laptops, they are all around and not as hard to "fix up" as you m…
I. Introduction There's an interesting discussion going on now in an Experts Exchange Group — Attachments with no extension (http://www.experts-exchange.com/discussions/210281/Attachments-with-no-extension.html). This reminded me of questions tha…
This video shows how to remove a single email address from the Outlook 2010 Auto Suggestion memory. NOTE: For Outlook 2016 and 2013 perform the exact same steps. Open a new email: Click the New email button in Outlook. Start typing the address: …
This tutorial demonstrates a quick way of adding group price to multiple Magento products.

771 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

14 Experts available now in Live!

Get 1:1 Help Now