yodaa
asked on
Windows 10
Hi Guys
I have setup for one user to disable C drive access via GPO.
It works fine when I login using this user credentials I cannot see C drive at all or even when i click on explorer no access, so its great.
But What i have noticed when I type to browse his computer via network locally on this machine \\clientpc\c$. I am able to access to C drive
is it some kind of glitch?
I have setup for one user to disable C drive access via GPO.
It works fine when I login using this user credentials I cannot see C drive at all or even when i click on explorer no access, so its great.
But What i have noticed when I type to browse his computer via network locally on this machine \\clientpc\c$. I am able to access to C drive
is it some kind of glitch?
ASKER
Yes I have access to this user.
I disabled access to c drive but with his credentials(this user is not admin or domain admin etc, just normal user) but actually I can browse into C drive when I type \\clientpc\c$
Very strange.
I disabled access to c drive but with his credentials(this user is not admin or domain admin etc, just normal user) but actually I can browse into C drive when I type \\clientpc\c$
Very strange.
Did you removed access or did you just hide the C:\? What policy did you apply?
Let's see your GPO. I have my thoughts on why, which is simply the scope of your GPO can reasonably do, but let's verify.
ASKER
Please find attached the image below
ASKER
The scope is
Delegation- advanced " Domain Computers"read only.
Security Filtering - only designed user.
Delegation- advanced " Domain Computers"read only.
Security Filtering - only designed user.
When you're accessing a Windows share, you're not accessing My Computer, you're accessing the drive or folder itself. All your Group Policy is doing is hiding the C drive in My Computer (as well as preventing access to the C drive from My Computer).
Think of it as walking around a locked door, not through it.
Think of it as walking around a locked door, not through it.
ASKER
Is there another solution to block it via GPO?
Are users administrators on their PCs?
ASKER
No they are not
Really, the only feasible solution that doesn't require a ton of complexity would be to disable administrative shares. However, bear in mind that means a Domain Admin won't be able to access them either.
ASKER
So basically there is no solution to disable it?
I cannot disable admin share functionality.
I cannot disable admin share functionality.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
cheers guys
are you trying to disable shared C$