GTK restrict drives and NTFS permissions

[CyberNerd]

WE are currently using Citrix with hidden local drives but wish to install GTK apps.
as far as I know, GTK overrides the 'security through obscurity' method of hiding local disks.
I appreciate the hiding method is rather pointless, but so far has worked.
What is best practice for securing windows local disks, I've made sure student don't have write access to program files, but are the default windows C:\ drive values 'safe' for the on windows servers for multiuser ? or are there other areas I need to lookat - anyone have a checklist?

Alternatively, is there a way of hiding the disks in GTK short of re-writing it?

[Geoff]

the *nix equivalent of 'hidden' folders in Windows is to precede the name with a fullstop.

[CyberNerd]

.. so if I rename c:\winnt to c:\.winnt then the GTK apps won't see it?
sounds like it could end in tears.