Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations Wanet Telecoms Ltd on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Blocking access to the C drive on a local PC

Status
Not open for further replies.

MDJ52

MIS
Mar 30, 2001
120
US
We have a network that is running multiple Windows 2003 servers. We have approx. 80 terminals on this network. About half of these PC's are not allowed access to their C drive. This was done to force them over to their networked user folder, thereby providing back of documents.
They cannot write a file to their PC C drive and it does not show up in MyComputer.
If you log in as administrator all is clear and you can process info using the C drive. We have recently picked up some software that creates 2 work folders on the C drive so that temp files can be created, used, and then deleted.
For the life of us, none of the current support staff, we are all new in the last 7 months, can find how they are controlling this restricted access. I believe it must be logon script. Another member feels it must be set at the individual machines somewhere.
Whit any luck this is the proper forum to post this in.
Thanks for any help.
 
It could either be through a 3rd party application that alters the group policy or done directly in the gpmc.

It's location in the gp editor is User Configuration>Administrative Templates>Windows Components>Windows Explorer>Prevent access to drives from my computer and or Hide these specified drives in My Computer. But if the drive is hidden the temp files should still be able to write to the C drive so it's more than likely the Prevent one.
 
You would first need to find the policy that is linked to those with the restrictions. That's if its a GP.
 
What is the software?

GP prevents the users explorer shell from creating files on the C drive but it is possible for certain apps to do this if they run in their own security context.

I'd grab a copy of the GPMC and see what settings apply to the workstation.


You know what Jack Burton always says at a time like this...
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top