Hide drives with GPO

[keogk]

I am trying to Hide Drive letters A,b,c,d, and E.
I created a new adm file and imported that into my GPO. When I look at the GPO setting for Hide these specified drives in My Computer I do not have a listing for abcde just the default drive letters.
I am putting the adm file in Windows/inf


Am I missing something. Here is my ADM file I used which I just modified based on one I found





CLASS USER

CATEGORY !!HideDrives

KEYNAME Software\Microsoft\Windows\CurrentVersion\Policies \Explorer
POLICY !!HideDrives

PART !!HideDrivesDropdown DROPDOWNLIST NOSORT REQUIRED
VALUENAME "NoDrives"
ITEMLIST
NAME !!ABOnly VALUE NUMERIC 3
NAME !!COnly VALUE NUMERIC 4
NAME !!DOnly VALUE NUMERIC 8
NAME !!ABConly VALUE NUMERIC 7
NAME !!ABCDOnly VALUE NUMERIC 15
NAME !!HideACE VALUE NUMERIC 21
NAME !!HideCE VALUE NUMERIC 20
NAME !!HideCDE VALUE NUMERIC 28
NAME !!HideACEF VALUE NUMERIC 53
NAME !!HideCEF VALUE NUMERIC 52
NAME !!HideABCDE VALUE NUMERIC 32
NAME !!ALLDrives VALUE NUMERIC 67108863 DEFAULT
NAME !!RestNoDrives VALUE NUMERIC 0
END ITEMLIST
END PART
END POLICY



END CATEGORY;HideDrives

[strings]
Blank=" "
ABCDOnly="Restrict A, B, C and D drives only"
ABConly="Restrict A, B and C drives only"
ABOnly="Restrict A and B drives only"
ALLDrives="Restrict all drives"
COnly="Restrict C drive only"
DOnly="Restrict D drive only"
HideACEF="Restrict A,C,E and F drives only"
HideCDE="Restrict C, D and E drives only"
HideACE="Restrict A, C and E drives only"
HideCE="Restrict C and E drives only"
HideCEF="Restrict C, E and F drives only"
HideABCDE="Restrict A, B, C, D and E drives only"
HideDrives="Hide Drives"
HideDrivesDropdown="Hide Drives Selection"
MoveProfile="Move Profiles"
MoveProfileDropdown="Move User Profile Location"
MOVEPROFILETOD="Move Profile to D Drive"
RestNoDrives="Restore Drives"

[pete]

You're importing the .adm into the GPO, right? (Right-click Administrative Templates > Add/Remove Templates > Browse to .adm).

The other thing you may want to check is Filtering. (Right-click Administrative Templates > View > Filtering and untick "Only show policy settings that can be fully managed".

[glennda]

hiya,

i think you can achieve what you want without importing an adm template Using Group Policy Objects to hide specified drives

Toby

[petectid]

hiya,

i think you can achieve what you want without importing an adm template Using Group Policy Objects to hide specified drives

Toby

Yes this is right, your re-inventing the wheel here you can do this by editing the system.adm file, there are two keys in here NoViewDrive and NoDrive you just need to edit the Hex number that represents the drives you can or can't see. Then Insert your labels for the key in the bottom section of the adm file.

[keogk]

Yes I made sure to import the ADM in. It is listed in Add/Remove templates.

The other AD admins have asked that I not edit the system.adm file
I found a tool on a link from this site called Group Policy Drive Options but I am unsure if it will work with 2008

[AXE]

NAME !!HideABCDE VALUE NUMERIC 32
should be
NAME !!HideABCDE VALUE NUMERIC 31

[sted]

Yes I made sure to import the ADM in. It is listed in Add/Remove templates.

The other AD admins have asked that I not edit the system.adm file
I found a tool on a link from this site called Group Policy Drive Options but I am unsure if it will work with 2008

you dont need to edit the system.adm file just use that adm files settings so user config\admin templates\windows components\windows explorer

hide these drives in my computer
and
prevent access to drives from my computer

[glennda]

you dont need to edit the system.adm file just use that adm files settings so user config\admin templates\windows components\windows explorer

hide these drives in my computer
and
prevent access to drives from my computer

thats what the microsoft site suggests to do, but then they suggested vista...

[sted]

thats what the microsoft site suggests to do, but then they suggested vista...

vista isnt that bad imo not that much different to 7 really

[bio]

This tool will create the ADM for you

bio..

[FN-GM]

What client os are you using? I am pretty sure that the adm does not work on machines newer than xp.

We hide the s drive for sims for staff. On vista and 7 machines it didn't work. If it does let me know.

Cheers

[cookie_monster]

Take a look at this adm it was given to us by a support co, I don't think they'll mind it's all content that you can get on technet. Make sure you're using GPMC on an XP or Server 2003 box i'm not certain that 2008 will use it. (I think it will I can see the settings on my 2008 server.

Novus.adm - Windows Live

This file contains a few more settings than just hiding drives.

[keogk]

It seems it has changed in Vista and server 2008. No longer adm files its admx and adml
I found a helpful article Pretty much what was said except I needed to modify 2 files and create a CentralStore for the files.
http://www.datacrash.net/howtos/howt...r-2008%29.html

[cookie_monster]

You don't have to create a central store though, take a look at this link but yes your right it's admx files for Vista+.

Ask the Directory Services Team : Windows 7, Windows Server 2008 R2 and the Group Policy Central Store