Preventing Access to Drives in GP

[sippo]

Does anyone know how to edit the Group policy object in Preventing access to drives. I've been able to hide them but students can still access them via a shortcut. If I restrict all the drives then they cannot get into their H: (Home) drive. I need to edit it so I can prevent access to the R: Drive. But they need access as its an apps drive. Make sense?

Anyhow, I edited the hide drives absolutely fine in sysvol policies but am struggling for to edit the prevent access.

[plexer]

Prevent Access or Hide Disk Drives using Group Policy | Tech Hub <--- any help?

Ben

[sippo]

That just explains how to prevent access to the ones already in place. I want to edit the file so I can add a network drive.

[Diello]

Using Group Policy Objects to hide specified drives

[sippo]

That hides the drives but doesn't prevent access. For example, in the hide feature we have hidden c and r. But students can still access the r drive by creating a shortcut. So i need to prevent access (the next option down in gp editer).

[tmcd35]

Surely the security permissions on the drive are set so the students can read and not modify/write to the drive? If so, then I can't see the problem with them being able to create a shortcut to it.

You can add a '$' at the end of the sharename of the folder being mapped to drive 'R' to stop it from being browsable in the network. You can hide the drive in GP.

But after that, any tighter security and I'm not sure they'd be able to run the software from the mapped drive. If you've done all the above, especially limiting their security permissions to read only, then I wouldn't worry about the clever few who can still find and make a shortcut to the drive. What damage can they do?

[Gibbo]

Surely the security permissions on the drive are set so the students can read and not modify/write to the drive? If so, then I can't see the problem with them being able to create a shortcut to it.

The only problem I've encountered with this are in some apps which require student write access to write data back to a folder.

[reggiep]

Sorry to bring this thread back to life, but can anyone tell me how I could hide a non system drive?

I have the P: drive mapped to server installed apps and it is then mapped to the users so they can access them.

i now want to hide the P: drive so users don't go wandring around it, even though they can't write to it.