How to prevent access to local server disks from office applications

[Davide]

Hi everybody,
I have this problem:

I want to prevent access to disk c: of my Citrix server
from users.

I've used GPOs that hide disks, prevent access and I've
disabled the "run" command.
Everythings works fine if I use the Windows Explorer for
browsing my disks: I see only network disks, and if I put
in the address bar c:\ I receive an error message and
return to My computer.... BUT if I open any office
applications and click on open or save as, and in the file
name form I put c:\ I receive the error message and when I
click its ok I'M IN THE C: DRIVE !!! with r&w permissions.

Anyone can help me???
Microsoft, You MUST help me!!!!

Thank for interesting...and sorry for the English.

 

[Vera Noest [MVP]]

Hiding the server drives has just a cosmetic effect, as you have
discovered. It hides the drives in some situations, but it is *not* a
security tool.
What you have to do is to set proper NTFS permissions on the file
system.

 

[Steve Wright]

In addition to the hide drives in the GPO there is also a
setting to prevent access to drives. It should be right
below the hide drives setting