Solved

What is best way to setup WIndows XP and WIndows 7 Desktop's to have non Admin users not see C:\ etc

Posted on 2010-08-25
7
283 Views
Last Modified: 2012-05-10
For an environment that has a Windows Server 2003 SBS and a Mix of WIndows XP and WIndows 7 Professional Desktops I was wondering the best way to do the following:

1) Setup the Desktops to have user (non admin accounts) such that the user's can only see and read/write to their standard Documents, Pictures, Music and Videos folders but not C:\ or other non standard directories.   The users will not even be able to see the non standard directores on their PCs.

The Users will also have their own Folders on the Server via a few Network mapped shared folders on the Server.

As mentioned, I need to know for both Windows XP Pro and Windows 7 Pro desktops.

Thanks
0
Comment
Question by:rdwolf
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
7 Comments
 
LVL 6

Expert Comment

by:fluk3d
ID: 33521348
You would need to modify the ACL on those directories to include the users that need access to them. By default everyone but logged in user and system/domain admin have access.
0
 
LVL 1

Expert Comment

by:Dymer2
ID: 33521693
It is not possible to hide C: and other directories thats part of the system. It is possible to make them read only (via permissions) but invisible, no.
0
 
LVL 2

Expert Comment

by:Juliancito
ID: 33521969
With Actgive Directory Domain and GPO you can do what u want: Create Domain Users and put the PC into domain.
Logon with domain non admin users in desktops
Create an OU and put the users there
Create a GPO for that OU and look for thouse Polices!
You can hide C: D: etc!
You restringe then to their User directoory (home)

GPO is a wide thing to expose here
 
0
Salesforce Made Easy to Use

On-screen guidance at the moment of need enables you & your employees to focus on the core, you can now boost your adoption rates swiftly and simply with one easy tool.

 
LVL 6

Accepted Solution

by:
zkrieger earned 250 total points
ID: 33521976
you cannot prevent access to the folders, but you can lock down the system and hide them, etc.

this is all done through group policy. since you are in a domain, you will use domain policy.
the only thing you really need to be aware of is that in order to set policy for XP and Windows 7, you will need 2 computers to work from with the administrative tools installed as well as the group policy tools installed. this is because when you edit policy from a windows XP workstation, those policies do not work for windows 7.

http://technet.microsoft.com/en-us/windowsserver/bb310732.aspx
is microsoft's group policy site.

what you are asking for is very broad. its not really a question at all. you are asking for someone to design your group policy for you. there are about 10,000 what ifs in that.

to set the users as only users, just give them domain accounts, not local accounts. as long as you dont put them in any groups they will not have any rights.

to prevent the C: drive from being visable, you edit the domain policy for the computers and set it

the specific location is "User Configuration" > " Administrative Templates" > "Windows Components" > "Windows Explorer"
then look for the key " Prevent access to drives from My Computer"
Add the C: drive.

save the policy and apply it to the active directory container where you have your user accounts stored. be aware, this means you will need another container for different users who will not get this policy.


again i stress, you are not asking a question, rather you are asking for a domain administrator.
0
 
LVL 6

Assisted Solution

by:fluk3d
fluk3d earned 250 total points
ID: 33521982
0
 
LVL 6

Expert Comment

by:zkrieger
ID: 33522065
edit to the above:
you edit the domain policy for the users. not the computers.  
0
 

Author Closing Comment

by:rdwolf
ID: 33577244
Thanks for your help.  I realize my question was too wide in scope but I was only looking for some tips to get started and not someone to design my GPOs etc..  The info. provided was very helpful.

Thanks
0

Featured Post

Comprehensive Backup Solutions for Microsoft

Acronis protects the complete Microsoft technology stack: Windows Server, Windows PC, laptop and Surface data; Microsoft business applications; Microsoft Hyper-V; Azure VMs; Microsoft Windows Server 2016; Microsoft Exchange 2016 and SQL Server 2016.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
BgInfo help 5 108
WMIC Output Formatting 1 84
XP  BSOD System error 1003 (102) 13 55
COM server issue 2 26
If you have done a reformat of your hard drive and proceeded to do a successful Windows XP installation, you may notice that a choice between two operating systems when you start up the machine. Here is how to get rid of this: Click Start Clic…
The Windows functions GetTickCount and timeGetTime retrieve the number of milliseconds since the system was started. However, the value is stored in a DWORD, which means that it wraps around to zero every 49.7 days. This article shows how to solve t…
In this video, we discuss why the need for additional vertical screen space has become more important in recent years, namely, due to the transition in the marketplace of 4x3 computer screens to 16x9 and 16x10 screens (so-called widescreen format). …
The viewer will learn how to successfully download and install the SARDU utility on Windows 7, without downloading adware.

739 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question