How can I disable RWW Permsions for Demo user account

Posted on 2007-08-01
Last Modified: 2010-03-18
I am using RWW on an SB Server 2003 and have a demo account set up for "show and tell", how can I specifically PREVENT any "demo" users from connecting their drives and copying any file from the server when ALL the authorized users are allowed to.  I also may want to disable any printing abilities on this account.
Question by:gordonmann
    LVL 77

    Expert Comment

    by:Rob Williams
    Should be able to control this using the following group policy:
    Computer configuration | Administrative Templates | Windows Components | Terminal services | Client/Server data redirection | Do not allow drive redirection
    LVL 3

    Expert Comment

    You my friend have some work to do..  make sure the directories do not have EVERYBODY on share access and on the file security make sure the demo account does not have access directly to folders or files.   Rob has a good suggestion, but if you are only worried about outside problems, that is fine.  Me I look at the whole picture and ask who needs access to what.  Sure it creates more work but it is a prudent practice, escpecially in SBS 2003, since the networks are generally "small", so why not do it?  

    Make sure you understand share permissions and file permissions before embarking on this quest.  It is not difficult to do, but requires understanding.


    LVL 1

    Author Comment

    ALL my security is group based.  rob your suggestion looks like it will work for ALL users but I only need to prevent the Demo User.
    LVL 77

    Expert Comment

    by:Rob Williams
    Afraid I can't give you the specifics, I have never worked with it, but you can filter it for specific users using what is called "loopback processing" within the GPO. It is specifically for that.  Perhaps someone else can "fill in the blanks".
    LVL 77

    Accepted Solution

    Actually thinking about it you could apply the policy to an OU containing the computer/s you wish to affect, then in the group policy management console, under scope, then, Security filtering, remove all users and add only the Demo User Account. This should apply only to that user.
    LVL 77

    Expert Comment

    by:Rob Williams
    Thanks gordonmann.
    Cheers !

    Featured Post

    How to run any project with ease

    Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
    - Combine task lists, docs, spreadsheets, and chat in one
    - View and edit from mobile/offline
    - Cut down on emails

    Join & Write a Comment

    We recently endured a series of broadcast storms that caused our ISP to shut us down for brief periods of time. After going through a multitude of tests, we determined that the issue was related to Intel NIC drivers on some new HP desktop computers …
    Learn about cloud computing and its benefits for small business owners.
    how to add IIS SMTP to handle application/Scanner relays into office 365.
    Here's a very brief overview of the methods PRTG Network Monitor ( offers for monitoring bandwidth, to help you decide which methods you´d like to investigate in more detail.  The methods are covered in more detail in o…

    728 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    18 Experts available now in Live!

    Get 1:1 Help Now