Solved

Disable access to C:, My Documents, etc.

Posted on 2010-09-17
4
1,038 Views
Last Modified: 2012-05-10
Hey guys,

I've used GPedit.msc to disable access to the c:\ drive for local users.  However, they can continue to save files to My Documents, My Pictures, etc..

How do I completely lock down access to save any files to the laptop?  Windows 7 Ultimate..  I know of Deep Freeze but was wanting to know if there are built in tools to Windows 7 to provide this access security.

I know some discourage this however, this is the request of corp to do so as they have network shares they connect to through a desktop...

Thanks in advance..
Removed the "Exchange Email Server" and "Access Forms" Zones, and added the "Active Directory" Zone instead.

rindi,
EE ZA Storage

Open in new window

0
Comment
Question by:thinksupport
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
4 Comments
 
LVL 1

Expert Comment

by:AlwaysOn_IT
ID: 33702316
You can do this with policy.  Are these machines on a Windows domain?
0
 
LVL 3

Accepted Solution

by:
latchways earned 500 total points
ID: 33702319
you can use GPO to redirect the my docs etc to network locations. Should do the trick
0
 
LVL 4

Expert Comment

by:dansperber
ID: 33702383
there is a setting in group policy under user settings, administrative templates, windows components, windows explorer that states "prevent users from adding files to the root of their users files folder"  if you enable this then that should block them from adding stuff to those folders.
0
 

Author Closing Comment

by:thinksupport
ID: 33905382
resolved
0

Featured Post

Instantly Create Instructional Tutorials

Contextual Guidance at the moment of need helps your employees adopt to new software or processes instantly. Boost knowledge retention and employee engagement step-by-step with one easy solution.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

A project that enables an administrator to perform actions within a user session context not just at the time of login but any time later on day(s) or week(s) later.
Did you know that more than 4 billion data records have been recorded as lost or stolen since 2013? It was a staggering number brought to our attention during last week’s ManageEngine webinar, where attendees received a comprehensive look at the ma…
Microsoft Active Directory, the widely used IT infrastructure, is known for its high risk of credential theft. The best way to test your Active Directory’s vulnerabilities to pass-the-ticket, pass-the-hash, privilege escalation, and malware attacks …
If you’ve ever visited a web page and noticed a cool font that you really liked the look of, but couldn’t figure out which font it was so that you could use it for your own work, then this video is for you! In this Micro Tutorial, you'll learn yo…

729 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question