Hi!

I am looking for a way where I can allow specific drive on my desktop users
using Group Policy. For example, my desktop users have standard drives, A
(fdd), C(System Partition), D(Dedicated for Data), and E(CD Rom). Currently
I am using "Hide these specific drives in My Computer" and "Prevent access
to drives from MC" GP to do it. I just control access to C: drive. But now,
I want to reverse the policy. I wanted to specify specific drive that is
allowed (Drive D: and E: only) and others are hidden and cannot be accessed.
Is this possible in Group Policy? Btw, I am using Windows 2000 AD with
Windows 2000 and XP Prof workstations. Hope you might help.

MP

Hi,

M P schrieb:
> [...] I wanted to specify specific drive that is allowed (Drive D:
> and E: only) and others are hidden and cannot be accessed.
> Is this possible in Group Policy? Btw, I am using Windows 2000 AD with
> Windows 2000 and XP Prof workstations. Hope you might help.

Yes. Edit the ADM and count "all" minus D+E

http://www.gruppenrichtlinien.de/How...ausblenden.htm

Scroll down ... theres a sample to hide:
A:, C:, F:, G: and M: and the other is "all" but H:

Edit the system.adm, nodrives and noviewondrives follow the same syntax.
It´s a 26 Bit mask, and an simple addition of the driveletter.
A=1, B=2, C=4, D=8 and so on.

Mark
--
Mark Heitbrink - MVP Windows Server
Homepage: www.gruppenrichtlinien.de
extend GPO: www.desktopstandard.com
PM: Vorname@Homepage, Versende-Adresse wird nicht abgerufen.

I can't understand the text. Do you have an english version?
"Mark Heitbrink [MVP]" <spam-(E-Mail Removed)> wrote in message
news:%23o%(E-Mail Removed)...
> Hi,
>
> M P schrieb:
>> [...] I wanted to specify specific drive that is allowed (Drive D:
>> and E: only) and others are hidden and cannot be accessed.
>> Is this possible in Group Policy? Btw, I am using Windows 2000 AD with
>> Windows 2000 and XP Prof workstations. Hope you might help.
>
> Yes. Edit the ADM and count "all" minus D+E
>
> http://www.gruppenrichtlinien.de/How...ausblenden.htm
>
> Scroll down ... theres a sample to hide:
> A:, C:, F:, G: and M: and the other is "all" but H:
>
> Edit the system.adm, nodrives and noviewondrives follow the same syntax.
> It´s a 26 Bit mask, and an simple addition of the driveletter.
> A=1, B=2, C=4, D=8 and so on.
>
> Mark
> --
> Mark Heitbrink - MVP Windows Server
> Homepage: www.gruppenrichtlinien.de
> extend GPO: www.desktopstandard.com
> PM: Vorname@Homepage, Versende-Adresse wird nicht abgerufen.

you my give usb a chance and give external drives a trie you can take
it with you"
M P wrote:
> I can't understand the text. Do you have an english version?
> "Mark Heitbrink [MVP]" <spam-(E-Mail Removed)> wrote in message
> news:%23o%(E-Mail Removed)...
> > Hi,
> >
> > M P schrieb:
> >> [...] I wanted to specify specific drive that is allowed (Drive D:
> >> and E: only) and others are hidden and cannot be accessed.
> >> Is this possible in Group Policy? Btw, I am using Windows 2000 AD with
> >> Windows 2000 and XP Prof workstations. Hope you might help.
> >
> > Yes. Edit the ADM and count "all" minus D+E
> >
> > http://www.gruppenrichtlinien.de/How...ausblenden.htm
> >
> > Scroll down ... theres a sample to hide:
> > A:, C:, F:, G: and M: and the other is "all" but H:
> >
> > Edit the system.adm, nodrives and noviewondrives follow the same syntax.
> > It´s a 26 Bit mask, and an simple addition of the driveletter.
> > A=1, B=2, C=4, D=8 and so on.
> >
> > Mark
> > --
> > Mark Heitbrink - MVP Windows Server
> > Homepage: www.gruppenrichtlinien.de
> > extend GPO: www.desktopstandard.com
> > PM: Vorname@Homepage, Versende-Adresse wird nicht abgerufen.

you my give usb a chance and give external drives a trie you can take
it with you"
M P wrote:
> I can't understand the text. Do you have an english version?
> "Mark Heitbrink [MVP]" <spam-(E-Mail Removed)> wrote in message
> news:%23o%(E-Mail Removed)...
> > Hi,
> >
> > M P schrieb:
> >> [...] I wanted to specify specific drive that is allowed (Drive D:
> >> and E: only) and others are hidden and cannot be accessed.
> >> Is this possible in Group Policy? Btw, I am using Windows 2000 AD with
> >> Windows 2000 and XP Prof workstations. Hope you might help.
> >
> > Yes. Edit the ADM and count "all" minus D+E
> >
> > http://www.gruppenrichtlinien.de/How...ausblenden.htm
> >
> > Scroll down ... theres a sample to hide:
> > A:, C:, F:, G: and M: and the other is "all" but H:
> >
> > Edit the system.adm, nodrives and noviewondrives follow the same syntax.
> > It´s a 26 Bit mask, and an simple addition of the driveletter.
> > A=1, B=2, C=4, D=8 and so on.
> >
> > Mark
> > --
> > Mark Heitbrink - MVP Windows Server
> > Homepage: www.gruppenrichtlinien.de
> > extend GPO: www.desktopstandard.com
> > PM: Vorname@Homepage, Versende-Adresse wird nicht abgerufen.

M P schrieb:
> I can't understand the text. Do you have an english version?

You don´t need the text, it´s just mathematics ;-)

If you want only D + E then its All (67108863) minus (D=(8) + E=(16))
-> 67108863 - 8 - 16 = 67108839

After that extend the ITEMLISTS on nodrives and noviewondrives
-> NAME "All but D: and E:" VALUE NUMERIC 67108839

Mark
--
Mark Heitbrink - MVP Windows Server
Homepage: www.gruppenrichtlinien.de
extend GPO: www.desktopstandard.com
PM: Vorname@Homepage, Versende-Adresse wird nicht abgerufen.