Sounds like your app isn't following the rules. It's an expensive fix, but you could use the AppSense product to do it (Application Manager). -----Original Message----- From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On Behalf Of Seitz, Linden Sent: 17 December 2003 2:47 AM To: 'thin@xxxxxxxxxxxxx' Subject: [THIN] Re: Hide Drives Problem One thing about the application is that while the vendor told me it is a 32-bit app, the window that allows access to the drives I want to hide has an eerie Window 3.1 Explorer look to it. Anyway, as you indicated, the values I get for HKEY_USERS\usersid\Software\Microsoft\Windows\CurrentVersion\Policies\Explor er are: NoDrives: 3ffffff (67108863) NoViewOnDrive: 3ffffff (67108863) so they should be hidden and preventing access, but they are not. As far as what I did on server to lockdown, here it is. Once again, it does what it should within Explorer. Logon as Local Admin, Run MMC, Group Policy Snapin and make the following Local Security Policy Changes: Enabling the following: * Local Computer Policy\User Configuration\Administrative Templates\Windows Components\Windows Explorer "Hide these drives in My Computer" * Local Computer Policy\User Configuration\Administrative Templates\Windows Components\Windows Explorer "Prevent access to drives from My Computer" Modify NTFS permissions on winnt\system32\GroupPolicy folder to: o Administrators Allow (FC) o Authorized Users Allow (RE, L, R) Any suggestions are most welcome! -----Original Message----- From: Jeff Durbin [mailto:techlists@xxxxxxxxxxxxx] Sent: Monday, December 15, 2003 2:25 PM To: thin@xxxxxxxxxxxxx Subject: [THIN] Re: Hide Drives Problem What do you mean when you say that the settings are configured in the Local Security Policy? I've not seen those settings in LSP. Since it's an NT4 domain, presumably you're delivering the settings via NT4 System Policy? If so, you can test it this way: 1. Log on as your test user 2. Determine the SID of your test user (USER2SID.EXE) 3. Log on (different session, test user still logged on) as an admin and open Regedit. Browse to HKEY_USERS\usersid\Software\Microsoft\Windows\CurrentVersion\Policies\Explor er and look for the values that the policy sets: NoDrives, NoViewOnDrive. JD -----Original Message----- From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On Behalf Of Seitz, Linden Sent: 16 December 2003 8:24 AM To: Thin@Freelists. Org (E-mail) Subject: [THIN] Hide Drives Problem Environment: Windows 2000 SP3 Terminal Servers running XPe FR3 in an NT4 domain "Hide these specified drives in My Computer" and "Prevent access to drives from My Computer" are configured in the Local Security Policy, server hosts Anonymous Applications only. A test Published Desktop as well as a test Published Explorer hide server and client drives. When I run a specific Published Application (Kronos Workstation version 4.3), I can view and access all client and server drives from within the application. How can I make sure that the drives are hidden within this application as well? Don't understand how the Desktop/Explorer can show one view and the application another.... ******************************************************** This Week's Sponsor - 99Point9.Com Emergent Online EOL Universal Printer 4.0 Has arrived! http://www.99point9.com/public/products/ ********************************************************* Useful Thin Client Computing Links are available at: http://thethin.net/links.cfm *********************************************************** For Archives, to Unsubscribe, Subscribe or set Digest or Vacation mode use the below link: http://thethin.net/citrixlist.cfm ******************************************************** This Week's Sponsor - 99Point9.Com Emergent Online EOL Universal Printer 4.0 Has arrived! http://www.99point9.com/public/products/ ********************************************************* Useful Thin Client Computing Links are available at: http://thethin.net/links.cfm *********************************************************** For Archives, to Unsubscribe, Subscribe or set Digest or Vacation mode use the below link: http://thethin.net/citrixlist.cfm ******************************************************** This Week's Sponsor - 99Point9.Com Emergent Online EOL Universal Printer 4.0 Has arrived! http://www.99point9.com/public/products/ ********************************************************* Useful Thin Client Computing Links are available at: http://thethin.net/links.cfm *********************************************************** For Archives, to Unsubscribe, Subscribe or set Digest or Vacation mode use the below link: http://thethin.net/citrixlist.cfm ******************************************************** This Week's Sponsor - 99Point9.Com Emergent Online EOL Universal Printer 4.0 Has arrived! http://www.99point9.com/public/products/ ********************************************************* Useful Thin Client Computing Links are available at: http://thethin.net/links.cfm *********************************************************** For Archives, to Unsubscribe, Subscribe or set Digest or Vacation mode use the below link: http://thethin.net/citrixlist.cfm