+ Post New Thread
Results 1 to 7 of 7
Windows 7 Thread, Deny Access to C Drive in Technical; Ok so its that age old question. How can I lock down the computer so that students do not have ...
  1. #1

    Join Date
    Feb 2011
    Posts
    91
    Thank Post
    6
    Thanked 24 Times in 15 Posts
    Rep Power
    12

    Deny Access to C Drive

    Ok so its that age old question. How can I lock down the computer so that students do not have access to c in windows 7. I have had issues with students accessing C: wont go into detail, however it needs locking down. I will talk you through what I have currently done.

    1. Hide C: - users create shortcut to C: so ....
    2. Stopped creation of shortcuts - They use "open with" then "browse" to access to c: so .....
    3. Removed open with option - They right click change default program and use the browse so....
    4. Removed option to change program association.

    This is where I'm at ...If they bring a shortcut in on a memory stick that is to c: it will allow them to c: If they change the properties of an existing shortcut to c: they can access c:

    How can I stop them getting to the c: when there are so many backdoors?
    What permissions do you set on the computers?
    How do you guys deal with this?

    Allowing them access to c: is not an option anymore and removing right click is not an option as it effects our technology software.

    Would be grateful for any advice.

  2. #2
    kubi's Avatar
    Join Date
    Jun 2014
    Posts
    1
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    I don't think you can outright deny them read rights to the C: drive, at the very least they need execute rights to %programfiles%.

    If you're worried about them messing (editing) system and program files, I imagine giving them limited user accounts should have solved that.

  3. #3

    localzuk's Avatar
    Join Date
    Dec 2006
    Location
    Minehead
    Posts
    17,652
    Thank Post
    516
    Thanked 2,443 Times in 1,891 Posts
    Blog Entries
    24
    Rep Power
    831
    We don't allow creation of shortcuts or the use of memory sticks. Read access to the C drive isn't really an issue - it doesn't give them access to anything really!

  4. #4
    Galway's Avatar
    Join Date
    Jun 2007
    Location
    West Yorkshire
    Posts
    1,323
    Thank Post
    9
    Thanked 300 Times in 209 Posts
    Rep Power
    99
    Try searching the forums, there are loads of threads about deny access to C drive. There are quite a few settings in AD that can lock it down nicely.
    If this is local machine there are some local policies that can also achieve the same result.

  5. #5

    Join Date
    Feb 2011
    Posts
    91
    Thank Post
    6
    Thanked 24 Times in 15 Posts
    Rep Power
    12
    Quote Originally Posted by localzuk View Post
    We don't allow creation of shortcuts or the use of memory sticks. Read access to the C drive isn't really an issue - it doesn't give them access to anything really!
    Think we are going down the route of banning memory sticks once our VLE is working properly and allowing access to their files at home.

    They have been pretty ingenious ... changing sticky keys to open up other software instead of sticky keys. Which I also had to block. Messing around with the classroom management system etc. Needless to say the culprits are being dealt with, but locking it down as best as I can.

    It is locked down very well they are just being overly creative
    Last edited by Chunks_; 11th June 2014 at 09:28 AM.

  6. #6

    Join Date
    Nov 2010
    Location
    leeds
    Posts
    30
    Thank Post
    2
    Thanked 7 Times in 5 Posts
    Rep Power
    9
    GPO
    User Configuration\Administrative Templates\Windows Components\Windows Explorer\Hide these drives in My Computer [Restrict all drivers]
    User Configuration\Administrative Templates\Windows Components\Windows Explorer\Prevent access to drives from My Computer [Restrict A, B, C and D drivers only]

    The above settings are what we use in our environment achieves the restriction that require.
    Cheers
    Mike

  7. #7

    Join Date
    Nov 2009
    Posts
    71
    Thank Post
    57
    Thanked 2 Times in 2 Posts
    Rep Power
    10
    Quote Originally Posted by DellOughta View Post
    GPO
    User Configuration\Administrative Templates\Windows Components\Windows Explorer\Hide these drives in My Computer [Restrict all drivers]
    User Configuration\Administrative Templates\Windows Components\Windows Explorer\Prevent access to drives from My Computer [Restrict A, B, C and D drivers only]

    The above settings are what we use in our environment achieves the restriction that require.
    Cheers
    Mike
    Hi I just saw this thread and this is exactly what I have done, have you have any issues with things getting blocked due to users being prevented from accessing the C:\ drive?

    Thanks

SHARE:
+ Post New Thread

Similar Threads

  1. Deny access to RDP & CMD
    By mcloum in forum Wireless Networks
    Replies: 10
    Last Post: 12th January 2009, 01:50 PM
  2. Disabling access to C: drive
    By lefthandandy in forum Windows
    Replies: 5
    Last Post: 8th December 2008, 07:11 PM
  3. No access to mapped drive ??
    By theeldergeek in forum Wireless Networks
    Replies: 0
    Last Post: 2nd June 2008, 02:21 PM
  4. Staff Remote Access to Home Drive
    By link470 in forum Windows
    Replies: 10
    Last Post: 21st January 2008, 08:38 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •