+ Post New Thread
Results 1 to 8 of 8
Windows 7 Thread, Restrict access to C: drive without breaking Start Menu search? in Technical; Just re-creating some old XP policies for Windows 7 but found a slightly annoying issue. Originally I set two policies: ...
  1. #1
    gshaw's Avatar
    Join Date
    Sep 2007
    Location
    Essex
    Posts
    2,662
    Thank Post
    166
    Thanked 220 Times in 203 Posts
    Rep Power
    67

    Restrict access to C: drive without breaking Start Menu search?

    Just re-creating some old XP policies for Windows 7 but found a slightly annoying issue. Originally I set two policies:

    Administrative Templates > Windows Components > Windows Explorer > Prevent access to Drives
    Administrative Templates > Windows Components > Windows Explorer > Hide these specified Drives

    With both enabled the Start Menu instant search no longer works

    If I turn off the "Prevent" policy search works again but you can get access to the file system by creating a shortcut or copying one in from elsewhere. Any solutions to making the search worked in the locked-down configuration or is it a case of one or the other?

  2. #2

    X-13's Avatar
    Join Date
    Jan 2011
    Location
    /dev/null
    Posts
    9,143
    Thank Post
    596
    Thanked 1,960 Times in 1,358 Posts
    Blog Entries
    19
    Rep Power
    818
    I'm also interested in knowing the answer to this... RM has C:\ hidden and unaccessable for everyone except sys admins.

    Telling people to search for programs is [marginally] easier than telling them the folder paths. [You know what I mean...]

  3. #3

    sonofsanta's Avatar
    Join Date
    Dec 2009
    Location
    Lincolnshire, UK
    Posts
    4,992
    Thank Post
    866
    Thanked 1,451 Times in 998 Posts
    Blog Entries
    47
    Rep Power
    618
    Redirect your Start Menu to a network location? I have C: drive restricted and hidden here, and the Start Menu redirected to a network location as standard practice, and I've not had any problems with it.

  4. #4
    gshaw's Avatar
    Join Date
    Sep 2007
    Location
    Essex
    Posts
    2,662
    Thank Post
    166
    Thanked 220 Times in 203 Posts
    Rep Power
    67
    Only problem is the large variation in installed apps so lots of dead shortcuts. Also badly behaved apps fall over if the Start Menu location is read only, granted they can be repackaged using MSI generators etc but no time for that in the short term.

  5. #5

    sonofsanta's Avatar
    Join Date
    Dec 2009
    Location
    Lincolnshire, UK
    Posts
    4,992
    Thank Post
    866
    Thanked 1,451 Times in 998 Posts
    Blog Entries
    47
    Rep Power
    618
    Quote Originally Posted by gshaw View Post
    Only problem is the large variation in installed apps so lots of dead shortcuts. Also badly behaved apps fall over if the Start Menu location is read only, granted they can be repackaged using MSI generators etc but no time for that in the short term.
    FWIW, dead shortcuts aren't a problem for us here - maybe that's just because people are used to not all software being everywhere, but in terms of the comptuer we've not had any technical issues arise from the inclusion of applications that are only present on some machines.

    Badly behaved apps, though, well - that's just the fun & challenge of educational networks...

  6. #6
    gshaw's Avatar
    Join Date
    Sep 2007
    Location
    Essex
    Posts
    2,662
    Thank Post
    166
    Thanked 220 Times in 203 Posts
    Rep Power
    67
    Still battling this, another one of those stupid design decisions that you wonder why no-one thought of:

    Prevent access to C: drive... great but the sensible thing would be to include an exclusions list, of course that's far too logical and an all-or-nothing policy is much more useful so I either have to redirect the Downloads folder to the network or have it blocked by the policy if left in the local user profile

  7. #7


    Join Date
    Mar 2009
    Location
    Leeds
    Posts
    6,619
    Thank Post
    229
    Thanked 860 Times in 738 Posts
    Rep Power
    297
    this is just spitballing but could you redirect start menu to a network location but use gpp to copy the local start menu there then delete on logout

  8. Thanks to sted from:

    gshaw (23rd May 2013)

  9. #8
    gshaw's Avatar
    Join Date
    Sep 2007
    Location
    Essex
    Posts
    2,662
    Thank Post
    166
    Thanked 220 Times in 203 Posts
    Rep Power
    67
    Quote Originally Posted by sted View Post
    this is just spitballing but could you redirect start menu to a network location but use gpp to copy the local start menu there then delete on logout
    Interesting idea, might have a play with a logon script to try it out (on a Novell network so no GPP for me )

SHARE:
+ Post New Thread

Similar Threads

  1. No access to mapped drive ??
    By theeldergeek in forum Wireless Networks
    Replies: 0
    Last Post: 2nd June 2008, 02:21 PM
  2. Restricting access to SIMS
    By djones in forum MIS Systems
    Replies: 7
    Last Post: 28th January 2008, 09:52 PM
  3. Staff Remote Access to Home Drive
    By link470 in forum Windows
    Replies: 10
    Last Post: 21st January 2008, 08:38 AM
  4. Restrict Access to OWA based on TIME
    By ICTNUT in forum How do you do....it?
    Replies: 4
    Last Post: 3rd June 2007, 06:37 PM
  5. Restrict Access To USB Devices
    By MuppetQueen in forum Wireless Networks
    Replies: 25
    Last Post: 15th December 2005, 04:53 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •