[gptalk] Re: Terminal Server GPO

  • From: "Darren Mar-Elia" <darren@xxxxxxxxxx>
  • To: <gptalk@xxxxxxxxxxxxx>
  • Date: Wed, 20 Dec 2006 09:24:21 -0800

Gino-

There are two "hide drive" policies. I'm curious which one you are using.
There is the one at User Configuration\Administrative Templates\Windows
Components\Windows Explorer\Hide these specified drives in My Computer" and
then there one in that same area called, "Prevent access to drives from My
Computer". If you're not using the latter one, you might want to set that
instead. It will allow them to "see" those drives, but not access them. The
problem with the "Hide Drives" policy is that it only works if the APIs
being used respect it, and of course, you've found at least operation where
they don't (there are others as well). 

 

Let me know if the "Prevent access" doesn't meet your needs.

 

Darren

 

 

Darren Mar-Elia

For comprehensive Windows Group Policy Information, check out www.gpoguy.com
<http://www.gpoguy.com/> -- the best source for GPO FAQs, video training,
tools and whitepapers. Also check out the Windows
<http://www.amazon.com/gp/product/0735622175/qid=1122367169/sr=8-1/ref=pd_bb
s_1/104-1133146-9411929?v=glance&n=283155>  Group Policy Guide, the
definitive resource for Group Policy information. 

 

Download the new GPHealth Reporter trial version at
http://www.sdmsoftware.com/products.php

 

 

 

From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On
Behalf Of Difarnecio, Gino (Citco)
Sent: Wednesday, December 20, 2006 9:12 AM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Terminal Server GPO

 

I have created a restricted Terminal Server user environment using group
policies. I have configured the setting to hide the A,C,and D drives. This
setting is effective when a user opens explorer. However, I am unable to
prevent the user from right clicking on the start menu and using that
context menu to open explorer. When this is done, the local drives are
visible to the end user. I have enabled the setting that prevents the
context menu on the Taskbar, but this does not block the context menu on the
Start menu. 

 

Any thoughts on how I might be able to remedy this problem?

 

Thanks

 

 

 

 

 

 

Other related posts: