Disabling access to C: drive

[lefthandandy]

Hi all,

We have recently put Software Restriction Policies in place but even though shortcuts to applications etc. on the local C: drive no longer work, I've found some students storing shortcuts to the C: drive itself in their network user spaces, which still works and give them full read/write access in Explorer. Is there any way of disabling shortcuts altogether, except for the ones in our network Start Menu?

Also, the students can access the C drive and bypass our Symantec Web Security proxy by simply typing addresses or paths into Word 2003's Web toolbar - could this be disabled too?

Thanks in advance for any help!

[ChrisH]

There are plenty of settings that disallow them to get at the C: drive in group policy. I have these set and they cant get at it through explorer or the windows api.

As for browsing using office I think there is something in the office adm files so you can set a gpo but I think also because of the way that it calls the IE API in IE6 they can still get round it. This is fixed in IE7 I believe.

There has been topics on this before so please have a good search.

[lefthandandy]

Thanks for your help Chris - I wasn't sure what to search under, but I've found some old topics on it now...

[Mr.Ben]

Precedence Technologies - Group Policy Hide Drives

This site creates a group policy for you

Should be all you need!

[lefthandandy]

Thanks for that link - we're running some tests now with the C drive disabled and hopefully it won't break anything... it's looking good so far!

[Mr.Ben]

No problem!