asked on

Group Policy C: drive restriction

Currently I block access to the local C: drive so domain users can't access the hard drive using Server 2003 group policy. Is there a way using group policy to allow users access to 1 folder on the hard drive and block everything else?

Example: Block access to the C: drive and allow access to C:\Program File\Lytec

Thanks

SMFX

Under the group policy, you can Add the folder in Computer Configuration\Windows Settings\Security Settings\File System. At that point you can define NTFS permissions that would allow the users to have access to the specified folder.

Obviously, just be careful that you don't put in an invalid path or group as this will force whatever changes you tell it to. In addition, you won't really be able to change it to something else on the client as this policy will overwrite it.

HTH,
-SMFX

ASKER CERTIFIED SOLUTION

ahm_khattab

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

AnthVXNE

thats fine if you run one pc, but if you run 3,000 wouldn't really want to go around each and everyone to do that.

SMFX

This is why I mentioned the group policy setting. That will work for folders on any computers the GPO would apply to. You just need to be careful as that can have adverse affects if you put the wrong permissions on the wrong folders; like not allowing SYSTEM access to OS files or Denying Everyone access to vital pieces.

-SMFX