group policy not blocking local hard drive.

[netguru2]

I have a computer lab in my school that uses Visual C++. I have the desktop locked down and I have the local hard drive locked out. But....Within Visual C++. when you go to new application......It will let you have access to the local hard drive and do anything you want. Does anyone know of any solutions to fix this.....Any help would be appreciated....Thanks, Jeff

 

[lefty78]

When you block the drive through policy, you are only blocking the visual of the drive....and usually only within the 'my computer' folder. The only way to truely shut off access to a drive, or specified parts of a drive, is to deny read rights at the specified level (i.e. you want to deny full access do it in the security properties of c: OR you want to deny access to the winnt folder, do it specifically to this folder.) Denying rights to a complete hard drive can have many negative affects, as you are cutting off the USE of the drive as apposed to hiding/removing the icons that give access to folders/files.