We help IT Professionals succeed at work.

Preventing users from seeing their server mapped drives and folders.

ppillors
ppillors asked
on
Can I prevent users from seeing server folders/drives in Windows Explorer that they are mapped to?
Comment
Watch Question

Alan HardistyCo-Owner
Top Expert 2011

Commented:
Yes - stop mapping them!
Why do you want to stop them seeing drive mapping that they are mapped to?  Seems a little bit daft IMHO.

Commented:
You can hide them completely in group policy which will hide their drives, however if they had to grab a file out of there then of course they would have to see the drive in order to access them unless they use the backdoor method (\\server etc).  
ppillorsDirector of IS

Author

Commented:
Our accounting program requires that any user accessing data through that program be mapped to the drive. Because they are mapped to the drive they can see and access or delete any file in that folder through Windows Explorer. My Business Officer is afraid that curious users might possibly delete those files.
Commented:
use group policy, you can then hide that drive for it group policy you can select which drives to hide.  Example it will say hide drive a, b, or c, or all etc.  This way they can access the accounting program and not know the map drive is there.

In Group Policy or Organizational unit (where the users are), edit the policy and go here:

User Configuration\Administrative Templates\Windows Components\Windows Explorer

There should then be an option in there to hide specific drives etc.
Open your registry and go to the following location:

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\

Create a new DWORD: NoDrives
Use Decimal numbers below to find the right value for the drive letter you want to hide.

The "NoDrives" value uses a 32-bit word to define local and network drive visibility for each logical drive in the computer. The lower 26 bits of the 32-bit word correspond to drive letters A through Z. Drives are visible when set to 0 and hidden when set to 1.

If your not happy working in Hex, add these decimal numbers to hide the drive(s):

A: 1, B: 2, C: 4, D: 8, E: 16, F: 32, G: 64, H: 128, I: 256, J: 512, K: 1024, L: 2048, M: 4096, N: 8192, O: 16384, P: 32768, Q: 65536, R: 131072, S: 262144, T: 524288, U: 1048576, V: 2097152, W: 4194304, X: 8388608, Y: 16777216, Z: 33554432, ALL: 67108863

For example to hide drive A and drive D, you would add 1 (A) + 8 (D) which means the value should be set to "9".

To disable all the drives set the value to "67108863".

Restart Windows for the change to take effect.