+ Post New Thread
Page 2 of 2 FirstFirst 12
Results 16 to 18 of 18
Windows Thread, Stop students being able to create folders on the C: drive in XP in Technical; Originally Posted by macclad17 So whats the best way to hide the drives then across a domain? You can't - ...
  1. #16


    Join Date
    Jan 2006
    Posts
    8,202
    Thank Post
    442
    Thanked 1,032 Times in 812 Posts
    Rep Power
    339
    Quote Originally Posted by macclad17 View Post
    So whats the best way to hide the drives then across a domain?
    You can't - that's why it is a bodge.

    All it takes is for a kid to bring in a computer/tablet/phone and go \\computername\c$ and they still get write access to the C:\ drive.
    Macs and Linuxes won't even hide the $ share ( because windows only 'hides' it from windows clients)

    Like I said, the way to fix it is by securing the permissions - probably using a startup script.

  2. #17

    Join Date
    Jan 2012
    Posts
    8
    Thank Post
    1
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    Okay well for now the drives have been hidden across the school, this is until i can work out a way of stopping write access!

  3. #18
    msi
    msi is offline

    Join Date
    Mar 2008
    Posts
    22
    Thank Post
    1
    Thanked 8 Times in 2 Posts
    Rep Power
    15
    Quote Originally Posted by CyberNerd View Post
    You can't - that's why it is a bodge.
    Yes you can. See below.

    Quote Originally Posted by CyberNerd View Post
    All it takes is for a kid to bring in a computer/tablet/phone and go \\computername\c$ and they still get write access to the C:\ drive.
    Suggest reading this article to understand the difference between Authenticated Users and Domain Users:

    Differences between Authenticated Users, Domain Users, and Everyone groups

    Also, it can be done domain-wide. You just need to know how to use Group Policy.

    ... and you really need to understand the concepts of ACLs, the difference between rights and security, builtin groups, domain groups, etc.

    Start here:

    Group Policy Management Console > Computer Configuration > Policies > Windows Settings > Security Settings > File System

    ... and don't blame me if you accidentally turn all of your domain computers into doorstops in the single click of a button

    ... and don't say I recommended you actually do this. Because it's a really dumb idea unless you only use software that is properly written. Which, in a school, is highly unlikely
    Last edited by msi; 31st January 2012 at 04:32 PM.

SHARE:
+ Post New Thread
Page 2 of 2 FirstFirst 12

Similar Threads

  1. Replies: 5
    Last Post: 19th September 2011, 06:15 PM
  2. Replies: 11
    Last Post: 8th November 2010, 08:05 PM
  3. Replies: 3
    Last Post: 14th September 2010, 03:12 PM
  4. Replies: 6
    Last Post: 21st May 2009, 10:16 PM
  5. Replies: 9
    Last Post: 8th November 2005, 09:45 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •