Hide drives with GPO

[keogk]

I am trying to Hide Drive letters A,b,c,d, and E.

I created a new adm file and imported that into my GPO. When I look at the GPO setting for Hide these specified drives in My Computer I do not have a listing for abcde just the default drive letters.

I am putting the adm file in Windows/inf

 

 

Am I missing something. Here is my ADM file I used which I just modified based on one I found

 

 

 

 

 

CLASS USER

 

CATEGORY !!HideDrives

 

KEYNAME Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

POLICY !!HideDrives

 

PART !!HideDrivesDropdown DROPDOWNLIST NOSORT REQUIRED

VALUENAME "NoDrives"

ITEMLIST

NAME !!ABOnly VALUE NUMERIC 3

NAME !!COnly VALUE NUMERIC 4

NAME !!DOnly VALUE NUMERIC 8

NAME !!ABConly VALUE NUMERIC 7

NAME !!ABCDOnly VALUE NUMERIC 15

NAME !!HideACE VALUE NUMERIC 21

NAME !!HideCE VALUE NUMERIC 20

NAME !!HideCDE VALUE NUMERIC 28

NAME !!HideACEF VALUE NUMERIC 53

NAME !!HideCEF VALUE NUMERIC 52

NAME !!HideABCDE VALUE NUMERIC 32

NAME !!ALLDrives VALUE NUMERIC 67108863 DEFAULT

NAME !!RestNoDrives VALUE NUMERIC 0

END ITEMLIST

END PART

END POLICY

 

 

 

END CATEGORY;HideDrives

 

[strings]

Blank=" "

ABCDOnly="Restrict A, B, C and D drives only"

ABConly="Restrict A, B and C drives only"

ABOnly="Restrict A and B drives only"

ALLDrives="Restrict all drives"

COnly="Restrict C drive only"

DOnly="Restrict D drive only"

HideACEF="Restrict A,C,E and F drives only"

HideCDE="Restrict C, D and E drives only"

HideACE="Restrict A, C and E drives only"

HideCE="Restrict C and E drives only"

HideCEF="Restrict C, E and F drives only"

HideABCDE="Restrict A, B, C, D and E drives only"

HideDrives="Hide Drives"

HideDrivesDropdown="Hide Drives Selection"

MoveProfile="Move Profiles"

MoveProfileDropdown="Move User Profile Location"

MOVEPROFILETOD="Move Profile to D Drive"

RestNoDrives="Restore Drives"

[pete]

You're importing the .adm into the GPO, right? (Right-click Administrative Templates > Add/Remove Templates > Browse to .adm).

 

The other thing you may want to check is Filtering. (Right-click Administrative Templates > View > Filtering and untick "Only show policy settings that can be fully managed".

[glennda]

hiya,

 

i think you can achieve what you want without importing an adm template Using Group Policy Objects to hide specified drives

 

Toby

[petectid]

hiya,

 

i think you can achieve what you want without importing an adm template Using Group Policy Objects to hide specified drives

 

Toby

 

Yes this is right, your re-inventing the wheel here you can do this by editing the system.adm file, there are two keys in here NoViewDrive and NoDrive you just need to edit the Hex number that represents the drives you can or can't see. Then Insert your labels for the key in the bottom section of the adm file.

[keogk]

Yes I made sure to import the ADM in. It is listed in Add/Remove templates.

 

The other AD admins have asked that I not edit the system.adm file

I found a tool on a link from this site called Group Policy Drive Options but I am unsure if it will work with 2008

[AXE]

NAME !!HideABCDE VALUE NUMERIC 32

should be

NAME !!HideABCDE VALUE NUMERIC 31

[sted]

Yes I made sure to import the ADM in. It is listed in Add/Remove templates.

 

The other AD admins have asked that I not edit the system.adm file

I found a tool on a link from this site called Group Policy Drive Options but I am unsure if it will work with 2008

 

you dont need to edit the system.adm file just use that adm files settings so user config\admin templates\windows components\windows explorer

 

hide these drives in my computer

and

prevent access to drives from my computer

[glennda]

you dont need to edit the system.adm file just use that adm files settings so user config\admin templates\windows components\windows explorer

 

hide these drives in my computer

and

prevent access to drives from my computer

 

thats what the microsoft site suggests to do, but then they suggested vista...

[sted]

thats what the microsoft site suggests to do, but then they suggested vista...

 

vista isnt that bad imo not that much different to 7 really

[bio]

This tool will create the ADM for you

 

bio..

gpdrivesoptions.zip

[FN-GM]

What client os are you using? I am pretty sure that the adm does not work on machines newer than xp.

 

We hide the s drive for sims for staff. On vista and 7 machines it didn't work. If it does let me know.

 

Cheers

[cookie_monster]

Take a look at this adm it was given to us by a support co, I don't think they'll mind it's all content that you can get on technet. Make sure you're using GPMC on an XP or Server 2003 box i'm not certain that 2008 will use it. (I think it will I can see the settings on my 2008 server.

 

Novus.adm - Windows Live

 

This file contains a few more settings than just hiding drives.

[keogk]

It seems it has changed in Vista and server 2008. No longer adm files its admx and adml

I found a helpful article Pretty much what was said except I needed to modify 2 files and create a CentralStore for the files.

http://www.datacrash.net/howtos/howto/hide-local-drives-%28vista-and-windows-server-2008%29.html

[cookie_monster]

You don't have to create a central store though, take a look at this link but yes your right it's admx files for Vista+.

 

Ask the Directory Services Team : Windows 7, Windows Server 2008 R2 and the Group Policy Central Store