?
Solved

GPO - Hide C:\drive in my computer explorer view

Posted on 2014-09-18
6
Medium Priority
?
2,604 Views
Last Modified: 2014-10-25
Hi Experts,
I've got a request to have users C:Drive hidden in explorer, my computer, but still give them the ability to access the C:drive by using the file explorer address bar and typing c:\
Is this achievable, if so can you please advise the exact settings,
0
Comment
Question by:craigleenz
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
6 Comments
 
LVL 11

Expert Comment

by:Venugopal N
ID: 40332065
Try with below steps and post the result.

1.Click on the "Start" button. Go to "Run", type "gpedit.msc" and press enter.
2.Wait for the "Group Policy" window to appear. Click on the "+" button beside User Configuration then click on the "+" button beside "Administrative Templates". Then click the "+" button beside "Windows Components" and then click "Windows Explorer".
3.Search for "Hide these specified drives in My Computer" in the options that appear in the right column of the window. Double click it, enable it and choose the drive(s) you want to hide
4.Search for "Prevent access to drives from My Computer". Double click it and repeat the previous step if you want to stop accessing any drive by "command" (e.g, by typing "C:" in the address bar or "Run").
5.Close the group policy window.
6.Restart your computer for changes to take effect.
7.Only the first hard disk drives can be locked here.
0
 
LVL 3

Expert Comment

by:Chretien TALOM
ID: 40332131
With Group Policy Objects in Windows, there is a "Hide these specified drives in My Computer" option that lets you hide specific drives. This article describes how to use Local Group Policy to hind the C drive of a Terminal Services.

- To open group policy, run gpedit.msc. Or start the Microsoft Management Console (MMC). On the Console menu, click Add/Remove Snap-in to add Policy Object (GPO) for the local computer.

- Open the following sections: User Configuration, Administrative Templates, Windows Components, and Windows Explorer.

- Double-click Hide these specified drives in My Computer.

- Check Enabled under Hide these specified drives in My Computer check box.

- Select Restrict C Drive only under Pick one of the following combinations.

- Click OK to save the settings.
0
 
LVL 2

Expert Comment

by:Vishal Patil
ID: 40332239
-- First, open Local Group Policy Editor by simply typing “group policy” in the search box from Start menu, and clicking on Edit group policy from the list.

-- Then, go to User Configuration -> Administrative Templates -> Windows Components -> Windows Explorer, and open the setting called Hide these specified drives in My Computer.

-- In the detail setting window, set option to Enable first, and pick drives that you want to hide from the drop down list under the option section.

-- Once you clicked on OK or Apply button, the setting takes effect pretty much right away. Note that by default it only provides you 4 drives to choose. If you have a drive letter that’s beyond D that you want to hide, you can modify the system.adm file to make the extra drive letters to show up in Group Policy.

-- Be careful though when you take these changes because if you don’t do it right you might lock yourself down as well. The Local Group Policy settings affect all local users, including the local administrator. It’s more designed to be used in a network powered by the Active Directory.
0
Get your Conversational Ransomware Defense e‑book

This e-book gives you an insight into the ransomware threat and reviews the fundamentals of top-notch ransomware preparedness and recovery. To help you protect yourself and your organization. The initial infection may be inevitable, so the best protection is to be fully prepared.

 

Author Comment

by:craigleenz
ID: 40335900
thanks for you replies, however I still can't get this working the way the client is wanting,
the problem when I set the GPO to hide the C:\ drive; it appears to remove access to the drive completely, so there must be another GPO where this needs to be configured.
0
 

Accepted Solution

by:
craigleenz earned 0 total points
ID: 40393806
I managed to get this working, appears their is another GPO you need to enable that makes the run command visible/available in windows 7, with this enabled coupled with the above suggestion, it works
IE: the C:Drive is hidden in the my computer/explorer view, however when users goes to explorer address and types C:\, it displays contents of the C:\drive, which is the behaviour we wanted.
0
 

Author Closing Comment

by:craigleenz
ID: 40403790
enabling the GPO to make the run command available coupled with some of the suggestion in this thread fixed the issue for me,
PS# the suggestions referenced in this thread I already came across on other articles.
0

Featured Post

Need protection from advanced malware attacks?

Look no further than WatchGuard's Total Security Suite, providing defense in depth against today's most headlining attacks like Petya 2.0 and WannaCry. Keep your organization out of the news with protection from known and unknown threats.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

The recent Petya-like ransomware attack served a big blow to hundreds of banks, corporations and government offices The Acronis blog takes a closer look at this damaging worm to see what’s behind it – and offers up tips on how you can safeguard your…
Hey fellow admins! This time, I have a little fairy tale for you. As many tales do, it starts boring and then gets pretty gory. I hope you like it. TL;DR: It is about an important security matter, you should read it if you run or administer Windows …
The viewer will learn how to simulate a series of sales calls dependent on a single skill level and learn how to simulate a series of sales calls dependent on two skill levels. Simulating Independent Sales Calls: Enter .75 into cell C2 – “skill leve…
The Email Laundry PDF encryption service allows companies to send confidential encrypted  emails to anybody. The PDF document can also contain attachments that are embedded in the encrypted PDF. The password is randomly generated by The Email Laundr…

762 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question