Link to home
Create AccountLog in
Avatar of Daniel Baies
Daniel BaiesFlag for United States of America

asked on

hide c:\users\ folder with a ADM template

How can i hide and prevent users to access C:\users folder from windows explorer but still have access to their personal user profile (Downloads, documents, etc.)
Basically i want to prevent users to see what usernames are in c:/Users folder.

Thanks for help
Avatar of reijer
reijer
Flag of Netherlands image

THe simple way is to right click the folder and make it hidden.
You then also make a policy that they can't change the show hidden files option
SOLUTION
Avatar of Krzysztof Pytko
Krzysztof Pytko
Flag of Poland image

Link to home
membership
Create an account to see this answer
Signing up is free. No credit card required.
Create Account
Isn't it the user account logging in that is also used to create the profiles in the first place? So if you somehow restricted access to this folder, you'd probably find no 'new' users could log on?
Yes it is. That it is more complicated than it looks like :) and I don't suggest following this way

Krzysztof
Me neither, I flat out think you'll stop a lot of stuff working in attempting to restrict people from seeing it. How come you want to hide it, anyway?
Avatar of Daniel Baies

ASKER

i create the usernames on that server with real names and i wanted to restrict somehow for users to go into that folder and see what names are there.
i tried to set the NTFS security on that folder but the problem is that new users cant log in since its profile wont be created there due to the restriction.
ASKER CERTIFIED SOLUTION
Link to home
membership
Create an account to see this answer
Signing up is free. No credit card required.
Create Account
There is also the whole access based enumeration feature in server 2008 (I believe you can download it for 2003), but I've never heard of this being used on client machines.

ABE should result in what you want, as if you don't have at least Read permissions to a folder, it's simply hidden from view. That would mean that even though they have modify permissions to the C:\Users folder, it should hide all the individual user folders within it, as each individual only has permissions to their own profile folder.

But as I said, I doubt you can even use this feature on a client OS...
Unfortunately ABE works only for shares, not single directory
I would consider in this case other user names scenario. If you really don't want to show full user names to others, create other login schema for user anonymous process rather than disallowing them access to profile folder

Krzysztof
This question has been classified as abandoned and is being closed as part of the Cleanup Program. See my comment at the end of the question for more details.