Access to the resource [mapped drive letter] has been disallowed.

[Guest]

We've recently upgraded our network - Win2000 Servers to Win2003, desktops to
WinXP. Now some groups are restricted from accessing drives when they type
the drive letter in the address bar. The error message reads:

Address Bar
Access to the resource [drive letter] has been disallowed.

The group does have other GPOs that are limiting access to such things as
Run and the Control Panel. The error appears whether they try to access a
local drive (c or a mapped drive (such as q:\). It's particularly
troubling as I can't narrow down how to begin troubleshooting this.

I've looked through GPOs and can't find anything that would limit drive
letter access in the address bar. Any help?

 

[Steven L Umbach]

Try running rsop.msc on an XP Pro computer while logged on as a user
experiencing the problem or from a Windows 2003 domain controller using the
RSOP mmc snapin. In particular look at restrictions in user
configuration/administrative templates/Windows components/Windows Explorer.

Steve

 

[Guest]

Thanks Steve,

Thanks. That helped. The setting, however, turned out to be a bit obscure.
It was in
-> User Configuration
-> Administrative Templates
-> Start Menu and Task Bar
-> Remove Run menu from Start Menu

The fine print shows what our problem was:

Allows you to remove the Run command from the Start menu, Internet Explorer,
and Task Manager.

If you enable this setting, the following changes occur:

(1) The Run command is removed from the Start menu.

(2) The New Task (Run) command is removed from Task Manager.

(3) The user will be blocked from entering the following into the Internet
Explorer Address Bar:

--- A UNC path: \\<server>\<share>

---Accessing local drives: e.g., C:

--- Accessing local folders: e.g., \temp>

Also, users with extended keyboards will no longer be able to display the
Run dialog box by pressing the Application key (the key with the Windows
logo) + R.

If you disable or do not configure this setting, users will be able to
access the Run command in the Start menu and in Task Manager and use the
Internet Explorer Address Bar.

Note:This setting affects the specified interface only. It does not prevent
users from using other methods to run programs.

Note: It is a requirement for third-party applications with Windows 2000 or
later certification to adhere to this setting.

 

[Steven L Umbach]

Glad you got it sorted out and thanks for reporting back what you found.
Curios that removing run from the start menu would do all that!

Steve

 

[VanguardLH]

dadanhamdani replies 3 years too late:

goto
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies

set NoRun to 0

or read this
http://support.microsoft.com/kb/179221/EN-US/

The OP died over **3 YEARS AGO**. Next time notice the datestamps before
replying.

http://forums.techarena.in

A leech site pretending to have forums by running a webnews-for-dummies
interface that submits improperly formatted posts through a gateway to
Usenet (aka newsgroups).

 

[David H. Lipman]

From: "dadanhamdani" <[email protected]>

Users are ENCOURAGED to drop the C R A P Usenet front-end called techarena.in and access
this News Group directly with the following News URL...

news://msnews.microsoft.com/microsoft.public.windowsxp.security_admin