Solved

GPO - Hide C:\drive in my computer explorer view

Posted on 2014-09-18
6
1,953 Views
Last Modified: 2014-10-25
Hi Experts,
I've got a request to have users C:Drive hidden in explorer, my computer, but still give them the ability to access the C:drive by using the file explorer address bar and typing c:\
Is this achievable, if so can you please advise the exact settings,
0
Comment
Question by:craigleenz
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
6 Comments
 
LVL 11

Expert Comment

by:Venugopal N
ID: 40332065
Try with below steps and post the result.

1.Click on the "Start" button. Go to "Run", type "gpedit.msc" and press enter.
2.Wait for the "Group Policy" window to appear. Click on the "+" button beside User Configuration then click on the "+" button beside "Administrative Templates". Then click the "+" button beside "Windows Components" and then click "Windows Explorer".
3.Search for "Hide these specified drives in My Computer" in the options that appear in the right column of the window. Double click it, enable it and choose the drive(s) you want to hide
4.Search for "Prevent access to drives from My Computer". Double click it and repeat the previous step if you want to stop accessing any drive by "command" (e.g, by typing "C:" in the address bar or "Run").
5.Close the group policy window.
6.Restart your computer for changes to take effect.
7.Only the first hard disk drives can be locked here.
0
 
LVL 3

Expert Comment

by:Chretien TALOM
ID: 40332131
With Group Policy Objects in Windows, there is a "Hide these specified drives in My Computer" option that lets you hide specific drives. This article describes how to use Local Group Policy to hind the C drive of a Terminal Services.

- To open group policy, run gpedit.msc. Or start the Microsoft Management Console (MMC). On the Console menu, click Add/Remove Snap-in to add Policy Object (GPO) for the local computer.

- Open the following sections: User Configuration, Administrative Templates, Windows Components, and Windows Explorer.

- Double-click Hide these specified drives in My Computer.

- Check Enabled under Hide these specified drives in My Computer check box.

- Select Restrict C Drive only under Pick one of the following combinations.

- Click OK to save the settings.
0
 
LVL 2

Expert Comment

by:Vishal Patil
ID: 40332239
-- First, open Local Group Policy Editor by simply typing “group policy” in the search box from Start menu, and clicking on Edit group policy from the list.

-- Then, go to User Configuration -> Administrative Templates -> Windows Components -> Windows Explorer, and open the setting called Hide these specified drives in My Computer.

-- In the detail setting window, set option to Enable first, and pick drives that you want to hide from the drop down list under the option section.

-- Once you clicked on OK or Apply button, the setting takes effect pretty much right away. Note that by default it only provides you 4 drives to choose. If you have a drive letter that’s beyond D that you want to hide, you can modify the system.adm file to make the extra drive letters to show up in Group Policy.

-- Be careful though when you take these changes because if you don’t do it right you might lock yourself down as well. The Local Group Policy settings affect all local users, including the local administrator. It’s more designed to be used in a network powered by the Active Directory.
0
Create Professional Looking Email Signatures

Create "Professional HTML Email Signatures" with ease.
7 Day Money Back Guarantee if not 100% Satisfied.
Affordable - Try it out for 7 Days Totally Risk Free.
Installers provided for over 45 Email clients.
Both Windows & MAC Supported.
Highly Recommended!

 

Author Comment

by:craigleenz
ID: 40335900
thanks for you replies, however I still can't get this working the way the client is wanting,
the problem when I set the GPO to hide the C:\ drive; it appears to remove access to the drive completely, so there must be another GPO where this needs to be configured.
0
 

Accepted Solution

by:
craigleenz earned 0 total points
ID: 40393806
I managed to get this working, appears their is another GPO you need to enable that makes the run command visible/available in windows 7, with this enabled coupled with the above suggestion, it works
IE: the C:Drive is hidden in the my computer/explorer view, however when users goes to explorer address and types C:\, it displays contents of the C:\drive, which is the behaviour we wanted.
0
 

Author Closing Comment

by:craigleenz
ID: 40403790
enabling the GPO to make the run command available coupled with some of the suggestion in this thread fixed the issue for me,
PS# the suggestions referenced in this thread I already came across on other articles.
0

Featured Post

How Do You Stack Up Against Your Peers?

With today’s modern enterprise so dependent on digital infrastructures, the impact of major incidents has increased dramatically. Grab the report now to gain insight into how your organization ranks against your peers and learn best-in-class strategies to resolve incidents.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

OnPage: Incident management and secure messaging on your smartphone
There's a lot of hype surrounding blockchain technology. Here's how it works and some of the novel ways it' s now being used - including for data protection.
Email security requires an ever evolving service that stays up to date with counter-evolving threats. The Email Laundry perform Research and Development to ensure their email security service evolves faster than cyber criminals. We apply our Threat…
The Email Laundry PDF encryption service allows companies to send confidential encrypted  emails to anybody. The PDF document can also contain attachments that are embedded in the encrypted PDF. The password is randomly generated by The Email Laundr…

737 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question