student user can access c:\

[srav]

my student users who have restricted access are able to access the C drive they can do this by right clicking in my douments, reate new shortcut then in the location they type c;\ then browse they can access the c drive and open exe's.

how can i stop this its urgent that they do not access the c drive any help is much apprciated

 

[Sthrad]

taken from annoyances.org

"Yesterday a question was asked that was also related to the My Documents folder in Windows Explorer. Cims wanted to know how to keep Windows Explorer from opening the My Documents folder by default, and qwk69gto (loved his Pontiac, I guess) provided the answer:

Type "c:\windows\explorer.exe /n, /e, c:\" (no quotes) in the Target: window of the Properties sheet for the Windows Explorer icon on the Start Menu, and "c:\windows" (again, no quotes) in the Start in: window.

After doing this (in addition to changing the setting for My Documents in the Group Policy editor), Explorer not only opens with the C: drive expanded, but the My Documents folder is finally gone, as well.

Thanks to Yap, Cims, and qwk69gto...together, you provided the answer to my problem."

Group Policy Editor

"Run gpedit.msc then at: User Configuration - Administrative Template - Desktop - Find this feature at right pane "Remove My Documents icon on the desktop" double click on it and choose enable from it's pop up window properties - click apply and ok. "

hope it helps

 

[srav]

thanks Sthrad but i have a similar setup already which is why this is puzzling. The user have nothing on their desktop and cannot right click or save to their desktop the GP's inplace are very restrictive. However the only place where they can save their work is my documents -which they must have ( access thru start menu only) and it is here where the problem lies.

can i disable the create shortcut option from the right click menu?

 

[RiderJon]

I am facing the same problem. Infact, I would like to completely disable the "New Context Menu"

i.e. right click -> New

But I don't want to disable the right click.


Srav, Bcastner suggested to me to use a combination of "Security" to prevent that. I am working on a right combo but haven't found a suitable one.

You can try to do that: right click c: drive and limit "students" access to read only, or something.

RiderJon
"I might have created ctrl+alt+del,
But Bill made it famous" - Dr. Dave

 

[Sthrad]

finally found how to disable the shortcut creation

type regedit.
find the key : [HKEY_CLASSES_ROOT\lnk\ShellNew]
right-click on the value Command rename it Command_old.
right-click, create a new chain value key and name it Command.

When u'll try to create a shortcut it will say not enough memory bla bla... and create a file with no extension that is not a shorcut in the folder (file is called "new shorcut&quot

I'll try to find something on disabling the New context menu

 

[dogman2000]

well commands along the lines of
e.g. msconfig, Gpedit.msc

 

[Sthrad]

actually found a new way to disable everything but the folder creation in the New context menu. it wont pop-up an error but will create a file of 0 kb with the extension (.zip .doc)except for the shortcuts where it will create a file with no extension.

find the key : [HKEY_CLASSES_ROOT\.xxx\ShellNew]
(.xxx being the extension of the files as if u want to disable shortcuts it is .Ink etc..)
Rename the ShellNew for somehting like OldShellNew
Create a new key(with nothing in it) to replace the Shellnew

 

[srav]

thanks guys for your help, i think maybe the suggestions could work except that this problem covers the whole network and therefore would not be practical to edit the registry on each machine. i seems to me that there is an error with one of the group policies does anyone know of a way to check this?

thanks again

 

[Teamaker]

We run a Win2k domain at our school. We had the same problem last year but i found a group policy that prevents access to specified drived no matter what and it works just fine.

!!A good cup of Tetley keeps the madness at bay!!

 

[Teamaker]

Its in User config - Windows components - Windows explorer - Prevent access to these drive.

!!A good cup of Tetley keeps the madness at bay!!

 

[RiderJon]

Preventing Access works only if you don't want the user to save anything on the C: drive.

Moreover you get a "Acess Denied C:" meesage everytime you logon. You might also get an error message when saving a file - have to check that out though.

The only way I have seen is to "right click" c: -> Security tab ..... and modify as needed.

Problem is I haven't been able to find a right combo. I want users to be able to save to just one folder and not be able to create any in the desktop.

Guess sthrad's solution might work. But still students might be able to bring a short-cut on a floppy and copy them over. If the paths are the same - as are in most computers - then it's a problem!


RiderJon
"I might have created ctrl+alt+del,
But Bill made it famous" - Dr. Dave

 

[RiderJon]

SRAV,

Copy the following and save as *.reg and run it. It will place "NoRun" with DWORD=1 in the respective HKCU hive. And now users won't be able to access c: or any comco like C:\windows. I just tried it and it works!

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
"NoRun"=dword:00000001






RiderJon
"I might have created ctrl+alt+del,
But Bill made it famous" - Dr. Dave

 

[jasonboyes]

A small suggestion there it a GPO that moves the My doc folder to where ever you want. If you point it to their Home dirs on the server then the have to write everything to the server and deny access to the C:.. Just a thought

Jason