Make drives read-only

[Sleepless in New Jersey]

Because of a serious security flap, I have been directed to make all drives
read-only to my users. I believe I have accomplished this for USB drives by
editing the registry. Please advise me on how to do this for all internal
drives.

 

[Shenan Stanley]

Because of a serious security flap, I have been directed to make
all drives read-only to my users. I believe I have accomplished
this for USB drives by editing the registry. Please advise me on
how to do this for all internal drives.

Repeating it elsewhere at a later time helps?

 

[Tim Meddick]

You cannot (should not) make the "boot" or "system" drive read-only.

The system *must* be able to write to that drive.

An alternative to making drives read-only is to set file & folder permissions, so
that only POWER-USERS and above can write / modify / delete files anywhere but his
own "My documents" folder within his, or a shared profile.

While it *is* possible on some systems to make various drives read-only through the
BIOS setup, doing so with the system-drive will make Windows unstartable.

==

Cheers, Tim Meddick, Peckham, London.

 

[smlunatick]

Because of a serious security flap, I have been directed to make all drives
read-only to my users.  I believe I have accomplished this for USB drives by
editing the registry.  Please advise me on how to do this for all internal
drives.

You must not make the primary Windows boot drive Read-only. Windows
will not work and the users can not do their work. You would probably
have to move all your "standard" users into a "limited" user group.

If you must revert all changes done during the day, look at

http://www.microsoft.com/windows/products/winfamily/sharedaccess/whatis/default.mspx