Solved

Windows 2008 RDS RemoteApps - Need users to Only Open Explorer Shell API to H drive

Posted on 2013-01-18
1
800 Views
Last Modified: 2013-01-29
We have a locked down an RDS environment.  Our users are connecting via RDWeb and remote apps.  No published desktops.  

We have locked down the systems so no libraries, my documents, favorites, my computer, network places, downloads, explorer navigation windows, etc or address bars are shown.  We give you your apps via remoteapps, a share accessible through the app for files, and ability to map your default session printers that is it.

The problem we continue to see is an issue when the Explorer Shell API is launched through an app like clicking an ellipsis in a browse to file field it wants to open to the default common location. Not the share drive provided which is the H drive.  I have updated common locations to point to H via registry mods and preferences but it still doesn't work.  

Any ideas to what needs to be modified in the registry on these RDS hosts?  So any time the explorer shell is called it opens to their H drive by default?
0
Comment
Question by:Mark Roddy
1 Comment
 
LVL 61

Accepted Solution

by:
btan earned 500 total points
ID: 38795818
Was thinking whether this will be if help

using "NoDrives" or "NoViewOnDrive" or "NoNetConnectDisconnect"
in either
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer
or HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

links respectively
http://technet.microsoft.com/en-us/library/cc938267.aspx
http://technet.microsoft.com/en-us/library/cc959437.aspx
http://technet.microsoft.com/en-us/library/cc959403.aspx

Another on "Prevent access to drives from My Computer" in GPO
@ User Configuration\Administrative Templates\Windows Components\Windows Explorer

See http://technet.microsoft.com/en-us/library/cc978514.aspx

or changing what is display in explorer using command option in
HKEY_CLASSES_ROOT\Folder\shell\explore\command

See http://forums.techguy.org/windows-xp/691087-solved-reset-windows-explorer-file.html
0

Featured Post

Do You Know the 4 Main Threat Actor Types?

Do you know the main threat actor types? Most attackers fall into one of four categories, each with their own favored tactics, techniques, and procedures.

Join & Write a Comment

Let’s list some of the technologies that enable smooth teleworking. 
Exchange server is not supported in any cloud-hosted platform (other than Azure with Azure Premium Storage).
This tutorial will walk an individual through the steps necessary to install and configure the Windows Server Backup Utility. Directly connect an external storage device such as a USB drive, or CD\DVD burner: If the device is a USB drive, ensure i…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…

743 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

10 Experts available now in Live!

Get 1:1 Help Now