2008R2 RDS

[brkuser]

Hi guys,

 

Long time lurker on here, great forum.

 

We are in the process of building a new domain at the college where I am working and we are in the process of rolling out Windows 7 and also RDS for some of the older machines, which to replace due to cost savings.

 

We have created a group policy Student RDS users, but we have run into a few issues. We have locked down the desktop quiet well and also access to the C drive, but when we put a shortcut on the desktop, say for the Calculator and go and Right-click and click on Properties and the option Open File Location this opens up the C drive of the RDS Server and you can browse it. Is there anyway of disabling this option, or even right-click on the desktop only? There is a group policy disables right click totally, even on Explorer, which is not ideal.

 

Thanks

[Michael]

You're right, disabling the context menu will disable it for the Desktop and Explorer. Do you mean you can browse the share where Calculator is redirected from or the actual C:\ drive of your server? And can you make changes, such as adding a folder to the root?

[Steve21]

Unless it's been changed recently you can change it through the content menu shellexs:

 

HKEY_CLASSES_ROOT\lnkfile\shellex\ContextMenuHandlers\OpenContainingFolderMenu

 

Should have a: 37ea3a21-7493-4208-a011-7f9ea79ce9f5

 

Set it to 0 and it should remove it. (From shortcuts aka lnk files)

 

(As always best back things up incase it has changed)

 

Steve

[brkuser]

You can browse the entire c drive as it brings up the explorer window. You can't create anything, or modify anything, but its seem stupid that you can have a policy to not show the c drive from Computer but then go in the back door so to speak, doing this method

[brkuser]

Unless it's been changed recently you can change it through the content menu shellexs:

 

HKEY_CLASSES_ROOT\lnkfile\shellex\ContextMenuHandlers\OpenContainingFolderMenu

 

Should have a: 37ea3a21-7493-4208-a011-7f9ea79ce9f5

 

Set it to 0 and it should remove it. (From shortcuts aka lnk files)

 

(As always best back things up incase it has changed)

 

Steve

 

I did remove this key completely from the equivalent location in 2008R2 and it didn't seem to make a difference...

[Michael]

There are two policies you can enable:

 

User Config > Policies > Admin Templates > Windows Components > Windows Explorer

 

Hide these specified drives in My Computer - Enabled

 

Prevent access to drives from My Computer - Enabled

[brkuser]

Thanks Michael, that worked a treat