hide drives for everyone except admins

[Guest Steve Paul]

1) If I want to hide drives from users, I understand this can be done with

group policy applied to the terminal servers. If I do that, is it possible

for Admins to still access the drives somehow ?

 

2) I have tried using the Nodrives registry setting to hide drives on a user

selected basis but there appear to be 2 registry keys needed to make this

happen, one is under hkcu\...\currentversion...\policies\explorer (no space

between current & version) *& the other is under hkcu\...\current

version...\policies\explorer (space betwen current & version). the nospace

key does not grant the user sufficient rights to add the registry key & so

this approach does not work. Short of making the user an admin, is there a

way to modify this registry key ?

 

thanks,

 

Steve Paul

[Guest Vera Noest [MVP]]

Re: hide drives for everyone except admins

 

Yes, here's how:

 

816100 - How To Prevent Domain Group Policies from Applying to

Administrator Accounts and Selected Users in Windows Server 2003

http://support.microsoft.com/?kbid=816100

 

231289 - Using Group Policy Objects to hide specified drives

http://support.microsoft.com/?kbid=231289

_________________________________________________________

Vera Noest

MCSE, CCEA, Microsoft MVP - Terminal Server

TS troubleshooting: http://ts.veranoest.net

___ please respond in newsgroup, NOT by private email ___

 

=?Utf-8?B?U3RldmUgUGF1bA==?= <StevePaul@discussions.microsoft.com>

wrote on 05 sep 2007 in

microsoft.public.windows.terminal_services:

>

> 1) If I want to hide drives from users, I understand this can be

> done with group policy applied to the terminal servers. If I do

> that, is it possible for Admins to still access the drives

> somehow ?

>

> 2) I have tried using the Nodrives registry setting to hide

> drives on a user selected basis but there appear to be 2

> registry keys needed to make this happen, one is under

> hkcu\...\currentversion...\policies\explorer (no space between

> current & version) *& the other is under hkcu\...\current

> version...\policies\explorer (space betwen current & version).

> the nospace key does not grant the user sufficient rights to add

> the registry key & so this approach does not work. Short of

> making the user an admin, is there a way to modify this registry

> key ?

>

> thanks,

>

> Steve Paul

[Guest Rustgod]

RE: hide drives for everyone except admins

 

The below key will hide all drives for just the current user from windows,

iexplorer, and the SendTo menu. It will NOT hide the drives if they use the

RUN command.

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]

"NoDrives"=dword:03ffffff

 

Hope this helps

 

"Steve Paul" wrote:

>

> 1) If I want to hide drives from users, I understand this can be done with

> group policy applied to the terminal servers. If I do that, is it possible

> for Admins to still access the drives somehow ?

>

> 2) I have tried using the Nodrives registry setting to hide drives on a user

> selected basis but there appear to be 2 registry keys needed to make this

> happen, one is under hkcu\...\currentversion...\policies\explorer (no space

> between current & version) *& the other is under hkcu\...\current

> version...\policies\explorer (space betwen current & version). the nospace

> key does not grant the user sufficient rights to add the registry key & so

> this approach does not work. Short of making the user an admin, is there a

> way to modify this registry key ?

>

> thanks,

>

> Steve Paul