Hi.

I have several computers and users. My server is windows server 2003.

I configured GPO that users cannot write drive C. But users can write and
read drive C. Therefore, some applications, such as AcdSee explorer C and
users use acdsee to write drive C.

How can i prevent users write or read drive C.

Thanks advice.

Burhan

MCSE

"Burhan ERSOY" <burhanersoy@msn.com> wrote in message
news:ODl2LW8iHHA.1900@TK2MSFTNGP04.phx.gbl...
I assume that drive C: is your system drive. If so then
preventing your users to read or write drive C: would
cripple Windows.

does your gpo apply the security settings to the desktop computers or is it
applying the permissions on the server.

Or infact, have you created an explorer policy that uses the "prevent access
to drives from My Computer" setting, if so that only really applies to
microsoft procedures, dialog boxes etc, standalone filesystem browsers do
not follow this policy.

i have irritating students that always curcumvent restrictions placed on the
domain with tools they download, the best way to stop them is with
deepfreeze from faronics, this resets a pc to the state it was last frozen
at.

Bloody tough getting it right takes time, once its right it stays that way
mind.


"Burhan ERSOY" <burhanersoy@msn.com> wrote in message
news:ODl2LW8iHHA.1900@TK2MSFTNGP04.phx.gbl...

This how to may help,

group policySetup Group Policy to restrict intenet access · How to use Group Policy to hind a hard drive · Group Policy Management Console · Group Policy Tools ...
http://www.howtonetworking.com/server/grouppolicy.htm


Bob Lin, MS-MVP, MCSE & CNE
Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net
How to Setup Windows, Network, VPN & Remote Access on http://www.HowToNetworking.com
"Burhan ERSOY" <burhanersoy@msn.com> wrote in message news:ODl2LW8iHHA.1900@TK2MSFTNGP04.phx.gbl...
Hi.

I have several computers and users. My server is windows server 2003.

I configured GPO that users cannot write drive C. But users can write and
read drive C. Therefore, some applications, such as AcdSee explorer C and
users use acdsee to write drive C.

How can i prevent users write or read drive C.

Thanks advice.

Burhan

MCSE

The policy only really hides the drive in Explorer. It does not change the
ACL's. This means that the user can't browse to it, but another program can
use it.
You can try removing the User right to create folders and files in the Root,
Anthony
http://www.airdesk.co.uk




"Burhan ERSOY" <burhanersoy@msn.com> wrote in message
news:ODl2LW8iHHA.1900@TK2MSFTNGP04.phx.gbl...

Hi Burhan,

If you are trying to lock down permissions on the file system itself,
you can do this within a GPO. Under Computer Configuration, Windows
Settings, Security Settings, File System, you can set permissions for
any folder. There are many security templates out there that can
assist in this too. I persoanlly like the ones at the NSA website:

http://www.nsa.gov/snac/downloads_os...ID=scg10.3.1.1

I recommend you thoroughly test this BEFORE you deploy any of these
though as they are very locked down. As some others have stated here
you can break Windows by blanket denying writes to the C drive.

Jaime Halscott
Lead Systems Engineer
ScriptLogic Corporation
http://www.scriptlogic.com