RDS on Server 2016 and hiding server drives

I've asked this in several different ways on here and I never get a clear answer.  I know I need a group policy, but I'm not having any luck making it happen.

My setup is Microsoft RDS on server 2016.  I'm publishing one app.

When my users go to save, the drives on the server are visible, as are the libraries.  I need these to be hidden.

Can someone tell me what GP (computer or user) to use and whether or not it's loopback.

Thanks

Cliff
crp0499CEOAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Cliff GaliherCommented:
So first, there is no universally good way to do what you want.

There *is* a policy in User Configuration, Administrative Templates, Windows Components, and Windows Explorer that lets you hide specific (or all) drives, but it doesn't technically hide libraries, and only impacts windows explorer.

*MOST* programs just use windows explorer as their file picker and layer their own UI on it, so that works. But if the developer chose to write their own UI, and quite a few common programs actual do, the GP is ignored.  The policy literally impacts the GUI, nut the underlying security model.

In short, I would worry less about hiding drives and more about using NTFS permissions to secure folders where users should not go.  Between that, folder redirection, work folders, etc, you can effectively prevent them from saving files on the server and give them cross-access between remoteapps and "local" files.
1

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Yasir ArfatJunior System AdministratorCommented:
Here is something I have tried in server 2012 r2 it might help

In the Group Policy management editor As this is User policy therefore on the left hand side frame, expand “User Configuration”, expand Policies, Administrative Templates Policy, Windows Components and select File Explorer. In the right hand side frame, double click on the “Hide these specified drives in My Computer”.

In the “Hide these specified drives in My Computer” window. Select Enabled to hide the drives using Group Policy. Under Options select the drive that you want to hide you’ll see options like “Restrict A and B drives only”, “Restrict C drive only”, “Restrict D drive only”, “Restrict all drives”, etc. For this practical, we’ll select C drive only. Click on Apply and then click on Ok agin to enable the hide drives group Policy.

Once the policy is defined and enabled, ensure you check it and confirm that it shows “Enabled” in the state.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Remote Access

From novice to tech pro — start learning today.