Solved

Group Policy on the root c drive

Posted on 2009-07-14
4
454 Views
Last Modified: 2012-05-07
Can someone please advise how i can lockdown our c drive so that users can only save into folders inside c drive and not on the root c drive.  I would like to set this up using group policy, just not sure which setting would lock this down.
0
Comment
Question by:showbizint
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
4 Comments
 
LVL 13

Expert Comment

by:rhinoceros
ID: 24856310
To get a simple one...

Try to hide C drive through Group Policy, and then they can save ALL in their "MyDocument" and "Desktop" only.
0
 

Author Comment

by:showbizint
ID: 24856719
No i can't hide c drive, it must be shown on their list of drives.  I want the users to see all the folder inside c drive, just not save anything on the root.
0
 
LVL 1

Accepted Solution

by:
jb2286 earned 50 total points
ID: 24890764
Using Active Directory may be cumbersome.  Allow the properties of "Read and Execute" for everyone on the root C: and leave the "Write" property unchecked.  Do not choose "Deny" for any of the permissions.  Do not propagate permissions.  Then setup the permissions for the rest of the folders on the C: drive as read, write, and execute with the inclusion to propagate the permissions to child folders.  The desired effect is pretty much the same if I'm not mistaken.
0

Featured Post

Free eBook: Backup on AWS

Everything you need to know about backup and disaster recovery with AWS, for FREE!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Auditing domain password hashes is a commonly overlooked but critical requirement to ensuring secure passwords practices are followed. Methods exist to extract hashes directly for a live domain however this article describes a process to extract u…
Had a business requirement to store the mobile number in an environmental variable. This is just a quick article on how this was done.
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …
This video shows how to use Hyena, from SystemTools Software, to bulk import 100 user accounts from an external text file. View in 1080p for best video quality.

707 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question