• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1094
  • Last Modified:

Documents and Settings folders - hiding in Terminal Services

Hello.

We provide ASP services for clients who connect to out Terminal Server farms. Is there any way to hide the Documents and Settings folders so that users cannot see the names of other people using the system, or else restrict rights to the documents and settings folders so that users can only see their own folder displayed if they explore to it?

Thanks
0
IconsultCI
Asked:
IconsultCI
3 Solutions
 
JohnfdiCommented:
They will always need list access at the very least. So they will always see the other users names. You can block folder access to other users folders but not from seeing the other users names.
0
 
nchondroCommented:
You can setup using Group policy so that the Terminal Services User group can only see certain folder.
0
 
richard_diverCommented:
If you setup allows it, you could also hide the entire C: drive, this option prevents browsing to this or other drives as specified. This does not effect running of applications, just file browsing
0
[Webinar] Improve your customer journey

A positive customer journey is important in attracting and retaining business. To improve this experience, you can use Google Maps APIs to increase checkout conversions, boost user engagement, and optimize order fulfillment. Learn how in this webinar presented by Dito.

 
Phadke_hemantCommented:
if you set the mandetory profiles then after loging off, the user profile disappears. this way you can prevent it upto some extent. if more than one user is loging on at the same time, they can see the user logged on to the server
0
 
Joseph NyaemaIT ConsultantCommented:
Remove the "List Files and Folders" permission for the "Everyone" and "Users" group on the Documents and settings folder.

i.e right click on the documents and settings folder, click on properties, and select the security tab then do the above.
Users will not be able to view the folders and documents and settings but administrators will.
0
 
IconsultCIAuthor Commented:
If I take away List Files and Folders from Everyone and users, when they attempt to logon will the profile be able to load ok? I'd assumed if they didnt have rights to view the folder, the profile would not be able to be created/amended??

Is there a Terminal Services policy that hides the entire C:? Any issues in your experience?
0
 
DenisCooperCommented:
If you just want to hide the Documents and Settings folders, by default, users shouldn't be able to see hidden folders, so you can hide the folder, and then restrcit changing folder properties through Group Policy.

0
 
DenisCooperCommented:
alternativly, you could hide the whole c: drive - which is propably recommended....

group policy editor > user settings > administrative templates > windows components > windows explorer > hide these specified drives in my computer

you could also use the prevent access to these drives setting
0
 
YogalingamCommented:
See the below link, for hiding drives or folders using regedit or group policies. take backup of your registry before making any registry changes.

http://thin.msterminalservices.org/hidedrives.cfm
0
 
Jeffrey Kane - TechSoEasyPrincipal ConsultantCommented:
Actually, ever since SP1, Windows Server 2003 includes the ability to configure Access Based Folder Enumeration: (a fancy title meaning that users that don't have permissions to a folder can't see it):

http://www.windowsnetworking.com/articles_tutorials/Implementing-Access-Based-Enumeration-Windows-Server-2003.html

This ONLY works in a Terminal Services environment if your user's My Documents folders are stored on a different server.

Jeff
TechSoEasy
0

Featured Post

Hire Technology Freelancers with Gigs

Work with freelancers specializing in everything from database administration to programming, who have proven themselves as experts in their field. Hire the best, collaborate easily, pay securely, and get projects done right.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now