hide drives for everyone except admins

[Steve Paul]

1) If I want to hide drives from users, I understand this can be done with
group policy applied to the terminal servers. If I do that, is it possible
for Admins to still access the drives somehow ?

2) I have tried using the Nodrives registry setting to hide drives on a user
selected basis but there appear to be 2 registry keys needed to make this
happen, one is under hkcu\...\currentversion...\policies\explorer (no space
between current & version) *& the other is under hkcu\...\current
version...\policies\explorer (space betwen current & version). the nospace
key does not grant the user sufficient rights to add the registry key & so
this approach does not work. Short of making the user an admin, is there a
way to modify this registry key ?

thanks,

Steve Paul

 

[Vera Noest [MVP]]

Re: hide drives for everyone except admins

Yes, here's how:

816100 - How To Prevent Domain Group Policies from Applying to
Administrator Accounts and Selected Users in Windows Server 2003
http://support.microsoft.com/?kbid=816100

231289 - Using Group Policy Objects to hide specified drives
http://support.microsoft.com/?kbid=231289
_________________________________________________________
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
TS troubleshooting: http://ts.veranoest.net
___ please respond in newsgroup, NOT by private email ___

=?Utf-8?B?U3RldmUgUGF1bA==?= <StevePaul@discussions.microsoft.com>
wrote on 05 sep 2007 in
microsoft.public.windows.terminal_services:

>
> 1) If I want to hide drives from users, I understand this can be
> done with group policy applied to the terminal servers. If I do
> that, is it possible for Admins to still access the drives
> somehow ?
>
> 2) I have tried using the Nodrives registry setting to hide
> drives on a user selected basis but there appear to be 2
> registry keys needed to make this happen, one is under
> hkcu\...\currentversion...\policies\explorer (no space between
> current & version) *& the other is under hkcu\...\current
> version...\policies\explorer (space betwen current & version).
> the nospace key does not grant the user sufficient rights to add
> the registry key & so this approach does not work. Short of
> making the user an admin, is there a way to modify this registry
> key ?
>
> thanks,
>
> Steve Paul

 

[Rustgod]

RE: hide drives for everyone except admins

The below key will hide all drives for just the current user from windows,
iexplorer, and the SendTo menu. It will NOT hide the drives if they use the
RUN command.
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
"NoDrives"=dword:03ffffff

Hope this helps

"Steve Paul" wrote:

>
> 1) If I want to hide drives from users, I understand this can be done with
> group policy applied to the terminal servers. If I do that, is it possible
> for Admins to still access the drives somehow ?
>
> 2) I have tried using the Nodrives registry setting to hide drives on a user
> selected basis but there appear to be 2 registry keys needed to make this
> happen, one is under hkcu\...\currentversion...\policies\explorer (no space
> between current & version) *& the other is under hkcu\...\current
> version...\policies\explorer (space betwen current & version). the nospace
> key does not grant the user sufficient rights to add the registry key & so
> this approach does not work. Short of making the user an admin, is there a
> way to modify this registry key ?
>
> thanks,
>
> Steve Paul