Solved

Group Policy C: drive restriction

Posted on 2006-07-17
4
4,612 Views
Last Modified: 2012-05-05
Currently I block access to the local C: drive so domain users can't access the hard drive using Server 2003 group policy.  Is there a way using group policy to allow users access to 1 folder on the hard drive and block everything else?  

Example:  Block access to the C: drive and allow access to C:\Program File\Lytec

Thanks
0
Comment
Question by:cgriffith4
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
4 Comments
 
LVL 3

Expert Comment

by:SMFX
ID: 17128065
Under the group policy, you can Add the folder in Computer Configuration\Windows Settings\Security Settings\File System.  At that point you can define NTFS permissions that would allow the users to have access to the specified folder.

Obviously, just be careful that you don't put in an invalid path or group as this will force whatever changes you tell it to.  In addition, you won't really be able to change it to something else on the client as this policy will overwrite it.

HTH,
-SMFX
0
 

Accepted Solution

by:
ahm_khattab earned 250 total points
ID: 17128165
good day

for sure u can

all what u have to do is to logon using administrator account that have access to drive c, go to the folder u need all the user to view, set permision to every one as full controll or modify, and block inharetance for this folder, then greate a shortcut for this folder to the desktop, or mount this folder to a logical partion name or share this folder and map it as a network drive for all users.

hope this will help.
0
 

Expert Comment

by:AnthVXNE
ID: 20754476
thats fine if you run one pc, but if you run 3,000 wouldn't really want to go around each and everyone to do that.

0
 
LVL 3

Expert Comment

by:SMFX
ID: 20770423
This is why I mentioned the group policy setting.  That will work for folders on any computers the GPO would apply to.  You just need to be careful as that can have adverse affects if you put the wrong permissions on the wrong folders; like not allowing SYSTEM access to OS files or Denying Everyone access to vital pieces.

-SMFX
0

Featured Post

Announcing the Most Valuable Experts of 2016

MVEs are more concerned with the satisfaction of those they help than with the considerable points they can earn. They are the types of people you feel privileged to call colleagues. Join us in honoring this amazing group of Experts.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Clickfree HD 6 138
Windows 10 gone bad 19 137
Any differences between redirected files & offline files? 4 72
Accessing WinXp drive on Win10: access denied 7 115
Introduction How to create multiboot configuration with XP\Vista and Windows 7 on it? And most important question - how to do this correctly so not to have any kind of nightmares we get when system gets screwed? First of all one should realize t…
I use more than 1 computer in my office for various reasons. Multiple keyboards and mice take up more than just extra space, they make working a little more complicated. Using one mouse and keyboard for all of my computers makes life easier. This co…
This is used to tweak the memory usage for your computer, it is used for servers more so than workstations but just be careful editing registry settings as it may cause irreversible results. I hold no responsibility for anything you do to the regist…
Hi friends,  in this video  I'll show you how new windows 10 user can learn the using of windows 10. Thank you.

761 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question