Access to C: Drive

[glennda]

I've missed a GPO somewhere i think. I've setup so that inside Explorer the students cannot open C:\ from the address bar. But if you create a shortcut (on desktop for example) and point it to C:\ you can then access teh C: drive of any machine.

 

Is there a gpo i've missed?

[plexer]

Why worry?

 

Ben

[glennda]

Why worry?

 

Ben

 

because the kids are kids and like boasting to there friends about what they have discovered and i have great pleasure in stopping it? Just can't be bothered to look it up at the moment!

[plexer]

Their logon accounts are restricted ones so not much they can do.

 

Ben

[glennda]

I know but would prefer them not to have access at all. I've just been testing and they can't do anything just is annoying that it lets you straight round it that when when there is a gpo which stops them doing it the other way.

[ihaveaproblem]

Is it this policy?

 

User - Windows settings - Admin templates - Windows Components/Windows Explorer

Prevent access to drives from My Computer ( c: drive)

 

Thats the only policy I've got set along with the Hide these specified drives in My Computer policy and I cant access the c: drive by using the shortcut trick ( However some annoying software seems to ignore every rule set and allows you to see all when you go to save )

[glennda]

i've got both of them enabled im fairly sure. If you create a shortcut to C: and then double click it works.

 

i'll investigate more in the morning now its time for sleep.

[ihaveaproblem]

i've got both of them enabled im fairly sure. If you create a shortcut to C: and then double click it works.

 

i'll investigate more in the morning now its time for sleep.

 

Not for me. If a student points a shortcut at c: drive and then double click it they get greeted with

 

"This operation has been cancelled due to restrictions in effect on this computer. Please contact your system administrator"

 

I'll have another look to see if I have anything else enabled to prevent this. I can always upload my policy if I can’t find anything else and you can’t either. Maybe you will see something I’ve missed that I have set.

[TheScarfedOne]

Indeed, thats what I get. Theres two GPOs which control this - Hide drives and Prevent access to drives. Double check your precidence

[glennda]

yeah might just me having missed it - will look in the morning

[glennda]

My Bad

 

i had set the policy to disable! obviously did that while tired!