Learn how to a build a cloud-first strategyRegister Now


How can I disable RWW Permsions for Demo user account

Posted on 2007-08-01
Medium Priority
Last Modified: 2010-03-18
I am using RWW on an SB Server 2003 and have a demo account set up for "show and tell", how can I specifically PREVENT any "demo" users from connecting their drives and copying any file from the server when ALL the authorized users are allowed to.  I also may want to disable any printing abilities on this account.
Question by:gordonmann
  • 4
LVL 78

Expert Comment

by:Rob Williams
ID: 19614107
Should be able to control this using the following group policy:
Computer configuration | Administrative Templates | Windows Components | Terminal services | Client/Server data redirection | Do not allow drive redirection

Expert Comment

ID: 19614536
You my friend have some work to do..  make sure the directories do not have EVERYBODY on share access and on the file security make sure the demo account does not have access directly to folders or files.   Rob has a good suggestion, but if you are only worried about outside problems, that is fine.  Me I look at the whole picture and ask who needs access to what.  Sure it creates more work but it is a prudent practice, escpecially in SBS 2003, since the networks are generally "small", so why not do it?  

Make sure you understand share permissions and file permissions before embarking on this quest.  It is not difficult to do, but requires understanding.



Author Comment

ID: 19618228
ALL my security is group based.  rob your suggestion looks like it will work for ALL users but I only need to prevent the Demo User.
Concerto's Cloud Advisory Services

Want to avoid the missteps to gaining all the benefits of the cloud? Learn more about the different assessment options from our Cloud Advisory team.

LVL 78

Expert Comment

by:Rob Williams
ID: 19618285
Afraid I can't give you the specifics, I have never worked with it, but you can filter it for specific users using what is called "loopback processing" within the GPO. It is specifically for that.  Perhaps someone else can "fill in the blanks".
LVL 78

Accepted Solution

Rob Williams earned 2000 total points
ID: 19618347
Actually thinking about it you could apply the policy to an OU containing the computer/s you wish to affect, then in the group policy management console, under scope, then, Security filtering, remove all users and add only the Demo User Account. This should apply only to that user.
LVL 78

Expert Comment

by:Rob Williams
ID: 19618501
Thanks gordonmann.
Cheers !

Featured Post

Veeam and MySQL: How to Perform Backup & Recovery

MySQL and the MariaDB variant are among the most used databases in Linux environments, and many critical applications support their data on them. Watch this recorded webinar to find out how Veeam Backup & Replication allows you to get consistent backups of MySQL databases.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Learn about cloud computing and its benefits for small business owners.
Resolve DNS query failed errors for Exchange
Michael from AdRem Software explains how to view the most utilized and worst performing nodes in your network, by accessing the Top Charts view in NetCrunch network monitor (https://www.adremsoft.com/). Top Charts is a view in which you can set seve…
When cloud platforms entered the scene, users and companies jumped on board to take advantage of the many benefits, like the ability to work and connect with company information from various locations. What many didn't foresee was the increased risk…
Suggested Courses

810 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question