Options
prevent access the client disk drive
mcse_696
Member Posts: 151
hi all
I m looking for GPO to prevent access disk drive C , D partitions , however I found only ADM template you can hide them , its mean the client can access with some other ways using run or browser , any way to prevent not just hide ?
I m looking for GPO to prevent access disk drive C , D partitions , however I found only ADM template you can hide them , its mean the client can access with some other ways using run or browser , any way to prevent not just hide ?
Comments
-
Options
Claymoore
Member Posts: 1,637
Right-click on the C: Drive, go to Security, select Everyone and then check the Deny box next to the Read permission - that should do it.
Just kidding
...
Users do actually need to access some parts of the C: drive so completely blocking them would be a very bad thing. What you want to do is make sure they can get to where they need to go and can't go where they shouldn't. Group Policy can do this with security templates that change permissions on files / folders / registry keys and Windows includes some starter templates in the C:\WINDOWS\security\templates folder. Review those settings and you should be able to modify one of those templates to properly secure your workstations.
After you lock down some of the folders, be sure to test your applications. You may find that some programs write temp files to odd locations and they won't work if you don't open up permissions on the folders you just locked down.