• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 146
  • Last Modified:

RDS on Server 2016 and hiding server drives

I've asked this in several different ways on here and I never get a clear answer.  I know I need a group policy, but I'm not having any luck making it happen.

My setup is Microsoft RDS on server 2016.  I'm publishing one app.

When my users go to save, the drives on the server are visible, as are the libraries.  I need these to be hidden.

Can someone tell me what GP (computer or user) to use and whether or not it's loopback.

Thanks

Cliff
0
crp0499
Asked:
crp0499
1 Solution
 
Cliff GaliherCommented:
So first, there is no universally good way to do what you want.

There *is* a policy in User Configuration, Administrative Templates, Windows Components, and Windows Explorer that lets you hide specific (or all) drives, but it doesn't technically hide libraries, and only impacts windows explorer.

*MOST* programs just use windows explorer as their file picker and layer their own UI on it, so that works. But if the developer chose to write their own UI, and quite a few common programs actual do, the GP is ignored.  The policy literally impacts the GUI, nut the underlying security model.

In short, I would worry less about hiding drives and more about using NTFS permissions to secure folders where users should not go.  Between that, folder redirection, work folders, etc, you can effectively prevent them from saving files on the server and give them cross-access between remoteapps and "local" files.
1
 
Yasir ArfatJunior System AdministratorCommented:
Here is something I have tried in server 2012 r2 it might help

In the Group Policy management editor As this is User policy therefore on the left hand side frame, expand “User Configuration”, expand Policies, Administrative Templates Policy, Windows Components and select File Explorer. In the right hand side frame, double click on the “Hide these specified drives in My Computer”.

In the “Hide these specified drives in My Computer” window. Select Enabled to hide the drives using Group Policy. Under Options select the drive that you want to hide you’ll see options like “Restrict A and B drives only”, “Restrict C drive only”, “Restrict D drive only”, “Restrict all drives”, etc. For this practical, we’ll select C drive only. Click on Apply and then click on Ok agin to enable the hide drives group Policy.

Once the policy is defined and enabled, ensure you check it and confirm that it shows “Enabled” in the state.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

The 14th Annual Expert Award Winners

The results are in! Meet the top members of our 2017 Expert Awards. Congratulations to all who qualified!

Tackle projects and never again get stuck behind a technical roadblock.
Join Now