[2 days left] What’s wrong with your cloud strategy? Learn why multicloud solutions matter with Nimble Storage.Register Now

x
?
Solved

Documents and Settings folders - hiding in Terminal Services

Posted on 2006-11-22
13
Medium Priority
?
1,088 Views
Last Modified: 2013-11-21
Hello.

We provide ASP services for clients who connect to out Terminal Server farms. Is there any way to hide the Documents and Settings folders so that users cannot see the names of other people using the system, or else restrict rights to the documents and settings folders so that users can only see their own folder displayed if they explore to it?

Thanks
0
Comment
Question by:IconsultCI
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
13 Comments
 
LVL 2

Expert Comment

by:Johnfdi
ID: 17998870
They will always need list access at the very least. So they will always see the other users names. You can block folder access to other users folders but not from seeing the other users names.
0
 
LVL 3

Expert Comment

by:nchondro
ID: 17999389
You can setup using Group policy so that the Terminal Services User group can only see certain folder.
0
 

Expert Comment

by:richard_diver
ID: 17999728
If you setup allows it, you could also hide the entire C: drive, this option prevents browsing to this or other drives as specified. This does not effect running of applications, just file browsing
0
VIDEO: THE CONCERTO CLOUD FOR HEALTHCARE

Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

 
LVL 10

Expert Comment

by:Phadke_hemant
ID: 18001054
if you set the mandetory profiles then after loging off, the user profile disappears. this way you can prevent it upto some extent. if more than one user is loging on at the same time, they can see the user logged on to the server
0
 
LVL 16

Accepted Solution

by:
Joseph Nyaema earned 336 total points
ID: 18001216
Remove the "List Files and Folders" permission for the "Everyone" and "Users" group on the Documents and settings folder.

i.e right click on the documents and settings folder, click on properties, and select the security tab then do the above.
Users will not be able to view the folders and documents and settings but administrators will.
0
 

Author Comment

by:IconsultCI
ID: 18001558
If I take away List Files and Folders from Everyone and users, when they attempt to logon will the profile be able to load ok? I'd assumed if they didnt have rights to view the folder, the profile would not be able to be created/amended??

Is there a Terminal Services policy that hides the entire C:? Any issues in your experience?
0
 
LVL 7

Expert Comment

by:DenisCooper
ID: 18003295
If you just want to hide the Documents and Settings folders, by default, users shouldn't be able to see hidden folders, so you can hide the folder, and then restrcit changing folder properties through Group Policy.

0
 
LVL 7

Assisted Solution

by:DenisCooper
DenisCooper earned 332 total points
ID: 18003363
alternativly, you could hide the whole c: drive - which is propably recommended....

group policy editor > user settings > administrative templates > windows components > windows explorer > hide these specified drives in my computer

you could also use the prevent access to these drives setting
0
 
LVL 5

Expert Comment

by:Yogalingam
ID: 18003485
See the below link, for hiding drives or folders using regedit or group policies. take backup of your registry before making any registry changes.

http://thin.msterminalservices.org/hidedrives.cfm
0
 
LVL 74

Assisted Solution

by:Jeffrey Kane - TechSoEasy
Jeffrey Kane - TechSoEasy earned 332 total points
ID: 18009103
Actually, ever since SP1, Windows Server 2003 includes the ability to configure Access Based Folder Enumeration: (a fancy title meaning that users that don't have permissions to a folder can't see it):

http://www.windowsnetworking.com/articles_tutorials/Implementing-Access-Based-Enumeration-Windows-Server-2003.html

This ONLY works in a Terminal Services environment if your user's My Documents folders are stored on a different server.

Jeff
TechSoEasy
0

Featured Post

Free Tool: SSL Checker

Scans your site and returns information about your SSL implementation and certificate. Helpful for debugging and validating your SSL configuration.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Welcome to my series of short tips on migrations. Whilst based on Microsoft migrations the same principles can be applied to any type of migration. My first tip Migration Tip #1 – Source Server Health can be found here: http://www.experts-exchang…
I don't know if many of you have made the great mistake of using the Cisco Thin Client model with the management software VXC. If you have then you are probably more then familiar with the incredibly clunky interface, the numerous work arounds, and …
This is used to tweak the memory usage for your computer, it is used for servers more so than workstations but just be careful editing registry settings as it may cause irreversible results. I hold no responsibility for anything you do to the regist…
Hi friends,  in this video  I'll show you how new windows 10 user can learn the using of windows 10. Thank you.

656 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question