[THIN] Re: Hide Drives Problem

  • From: "Jeff Durbin" <techlists@xxxxxxxxxxxxx>
  • To: <thin@xxxxxxxxxxxxx>
  • Date: Wed, 17 Dec 2003 09:35:47 +1300

Sounds like your app isn't following the rules. It's an expensive fix, but
you could use the AppSense product to do it (Application Manager).

-----Original Message-----
From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On Behalf
Of Seitz, Linden
Sent: 17 December 2003 2:47 AM
To: 'thin@xxxxxxxxxxxxx'
Subject: [THIN] Re: Hide Drives Problem


One thing about the application is that while the vendor told me it is a
32-bit app, the window that allows access to the drives I want to hide has
an eerie Window 3.1 Explorer look to it.

Anyway, as you indicated, the values I get for
HKEY_USERS\usersid\Software\Microsoft\Windows\CurrentVersion\Policies\Explor
er are:

NoDrives: 3ffffff (67108863)
NoViewOnDrive: 3ffffff (67108863)

so they should be hidden and preventing access, but they are not.

As far as what I did on server to lockdown, here it is.  Once again, it does
what it should within Explorer.  

Logon as Local Admin, Run MMC, Group Policy Snapin and make the following
Local Security Policy Changes:

Enabling the following:

* Local Computer Policy\User Configuration\Administrative Templates\Windows
Components\Windows Explorer "Hide these drives in My Computer"
* Local Computer Policy\User Configuration\Administrative Templates\Windows
Components\Windows Explorer "Prevent access to drives from My Computer"

Modify NTFS permissions on winnt\system32\GroupPolicy folder to:
o       Administrators  Allow (FC)
o       Authorized Users        Allow (RE, L, R)

Any suggestions are most welcome!

-----Original Message-----
From: Jeff Durbin [mailto:techlists@xxxxxxxxxxxxx]
Sent: Monday, December 15, 2003 2:25 PM
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Re: Hide Drives Problem


What do you mean when you say that the settings are configured in the Local
Security Policy? I've not seen those settings in LSP. Since it's an NT4
domain, presumably you're delivering the settings via NT4 System Policy? If
so, you can test it this way:

1. Log on as your test user
2. Determine the SID of your test user (USER2SID.EXE)
3. Log on (different session, test user still logged on) as an admin and
open Regedit. Browse to
HKEY_USERS\usersid\Software\Microsoft\Windows\CurrentVersion\Policies\Explor
er and look for the values that the policy sets: NoDrives, NoViewOnDrive.

JD

-----Original Message-----
From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On Behalf
Of Seitz, Linden
Sent: 16 December 2003 8:24 AM
To: Thin@Freelists. Org (E-mail)
Subject: [THIN] Hide Drives Problem


Environment:  Windows 2000 SP3 Terminal Servers running XPe FR3 in an NT4
domain  "Hide these specified drives in My Computer" and "Prevent access to
drives from My Computer" are configured in the Local Security Policy, server
hosts Anonymous Applications only.  A test Published Desktop as well as a
test Published Explorer hide server and client drives.  When I run a
specific Published Application (Kronos Workstation version 4.3), I can view
and access all client and server drives from within the application. How can
I make sure that the drives are hidden within this application as well?
Don't understand how the Desktop/Explorer can show one view and the
application another....

********************************************************
This Week's Sponsor - 99Point9.Com Emergent Online
EOL Universal Printer 4.0 Has arrived!
http://www.99point9.com/public/products/
*********************************************************
Useful Thin Client Computing Links are available at:
http://thethin.net/links.cfm
***********************************************************
For Archives, to Unsubscribe, Subscribe or 
set Digest or Vacation mode use the below link:
http://thethin.net/citrixlist.cfm

********************************************************
This Week's Sponsor - 99Point9.Com Emergent Online
EOL Universal Printer 4.0 Has arrived!
http://www.99point9.com/public/products/
*********************************************************
Useful Thin Client Computing Links are available at:
http://thethin.net/links.cfm
***********************************************************
For Archives, to Unsubscribe, Subscribe or 
set Digest or Vacation mode use the below link:
http://thethin.net/citrixlist.cfm
********************************************************
This Week's Sponsor - 99Point9.Com Emergent Online
EOL Universal Printer 4.0 Has arrived!
http://www.99point9.com/public/products/
*********************************************************
Useful Thin Client Computing Links are available at:
http://thethin.net/links.cfm
***********************************************************
For Archives, to Unsubscribe, Subscribe or 
set Digest or Vacation mode use the below link:
http://thethin.net/citrixlist.cfm

********************************************************
This Week's Sponsor - 99Point9.Com Emergent Online
EOL Universal Printer 4.0 Has arrived!
http://www.99point9.com/public/products/
*********************************************************
Useful Thin Client Computing Links are available at:
http://thethin.net/links.cfm
***********************************************************
For Archives, to Unsubscribe, Subscribe or 
set Digest or Vacation mode use the below link:
http://thethin.net/citrixlist.cfm

Other related posts: