Announcement

Collapse
No announcement yet.

Restricting access to C:\program files on a TS using GPO

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • Restricting access to C:\program files on a TS using GPO

    Hi all,

    I currently have in place a policy that I have configured for our Terminal Servers.

    I have hidden all the local drives but if a user goes to open a file from any application and gets the standard window to browse for the file, they can type in "C:\" into the file name field and see the contents of C:\ then browse around at will.

    e.g open word go to file then open.

    Obviously I can hide folders and restrict them, but I would just prefer that its not possible at all.


    Is there anyway to stop this?
    Last edited by theelk81; 27th March 2009, 17:26.

  • #2
    Re: Restricting access to C:\program files on a TS using GPO

    No one has any comments at all?

    Comment


    • #3
      Re: Restricting access to C:\program files on a TS using GPO

      You have to enable the GPO setting "Prevent access to drives from My Computer". This disables the ability of the user to do what you've described. Note that this does not prevent applications from accessing the drives, so your programs will continue to work but the user won't be able to access the drives.

      Comment


      • #4
        Re: Restricting access to C:\program files on a TS using GPO

        I did try that one but found the user could no longer access there own my documents.

        Comment


        • #5
          Re: Restricting access to C:\program files on a TS using GPO

          Well in that case why don't you use Folder Redirection to redirect My Documents to a network share.

          Comment


          • #6
            Re: Restricting access to C:\program files on a TS using GPO

            Is that only way to do it?

            Comment


            • #7
              Re: Restricting access to C:\program files on a TS using GPO

              That might be your only option. That's how we do it with our TS farm.

              Comment


              • #8
                Re: Restricting access to C:\program files on a TS using GPO

                Hmm not really a fan of folder redirection. Thanks for your help though, much appreciated

                Comment

                Working...
                X