Q

Restricting users from accessing the C drive

Expert Jeremy Moskowitz advises a reader on how to use Group Policy to allow users access to the My Documents folder, but not the C drive.

We use roaming profiles for our workstations. We would like the following configuration: Workstations can access My Documents but cannot access the C drive. Initially, this seemed to be easy. But I found out that some of our employees have been double-clicking on the Programs folder in the Start Menu and then, after the Explorer window popped up, they would create a shortcut and it would let them execute any file in the HDD. We cannot completely disallow access to the C drive because if we did they wouldn't have access to the My Documents folder. We're stuck. Any help is appreciated

I'm not sure if this will 100% work for you, but keep restricting the C drive, but simply use Folder Redirection...

to redirect the My Documents folder to the network. Because things aren't being preserved on the C drive anymore (because they're now being redirected to the network) you may get what you're after.

This was first published in January 2006

Dig Deeper

PRO+

Content

Find more PRO+ content and other member only offers, here.

Have a question for an expert?

Please add a title for your question

Get answers from a TechTarget expert on whatever's puzzling you.

You will be able to add details on the next page.

0 comments

Oldest 

Forgot Password?

No problem! Submit your e-mail address below. We'll send you an email containing your password.

Your password has been sent to:

-ADS BY GOOGLE

SearchServerVirtualization

SearchCloudComputing

SearchExchange

SearchSQLServer

SearchWinIT

SearchEnterpriseDesktop

SearchVirtualDesktop

Close