GPO TS and local C drive

[Guest]

I hide the c and d drives of the TS through a Group Policy. Is it possible
to see my local c drive?

 

[Vera Noest [MVP]]

Yes, you will still be able to see and access the c: drive in a
command window, from within most applications in the Save as dialog
box, and in many other ways.
Hiding drives is only a cosmetic feature, if you want to lock down
the server you will have to combine it with proper NTFS permissions
on the file system.

Aaah, now I understand that you want to see your *local* c: drive. I
assume that you mean when it is redirected to your TS session?
Also assuming that you run Windows 2003 TS, yes. Redirected drives do
not get a letter assigned to them, they are added to the drives in
"My Computer" as "Drives from Remote Desktop Connection".

 

[Guest]

Vera,

I have a 2000 DC and a 2003 TS when a user login to the domain with a W2000
I want too see the local c drive. When using the TS I don't want too see the
c drive of the TS.

Regards,

René

 

[Vera Noest [MVP]]

Let me try to rephrase your question, to check that I understand
you correctly:
1) when a user logs on to a workstation with a domain account, you
want to be able to see the local C: drive on the workstation
2) when the user then starts a TS session, you do *not* want to see
the C: drive on the TS
3) Question: do you want to see the workstations C: drive from
withing the TS session?

To achieve 1) and 2), you can use a Group Policy to hide the C:
drive on the Terminal Server. To avoid that this GPO is also
applied when the user logs on to the workstation, make sure that
you use "loopback processing" of the GPO, with the "Replace"
option.
To achieve 3), enable client drive redirection on the server and
the rdp client.

260370 - How to Apply Group Policy Objects to Terminal Services
Servers
http://support.microsoft.com/?kbid=260370

231287 - Loopback Processing of Group Policy
http://support.microsoft.com/?kbid=231287

--
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
http://hem.fyristorg.com/vera/IT
--- please respond in newsgroup, NOT by private email ---

 

[Guest]

Thanks, the loopback option was where I was looking for.

René