is there a policy to stop users from connnecting local drives in RDP session

[gs]

does the following would help stopping users from using RDP to copy data to
local drive at home machines?
[Computer Configuration\Administrative Templates\Windows Components\Terminal
Services \Client/Server data redirection]

· Do not allow drive redirection

Recommended setting: Enabled

By default, Terminal Server maps client drives automatically upon
connection. It is recommended that you enable this policy to prevent users
from having easy access to applications on their local computer.



does the above work also on domain stations is set on the domain server?

 

[Lanwench [MVP - Exchange]]

does the following would help stopping users from using RDP to copy
data to local drive at home machines?
[Computer Configuration\Administrative Templates\Windows
Components\Terminal Services \Client/Server data redirection]

· Do not allow drive redirection

Recommended setting: Enabled

By default, Terminal Server maps client drives automatically upon
connection. It is recommended that you enable this policy to prevent
users from having easy access to applications on their local computer.



does the above work also on domain stations is set on the domain
server?

I believe so. Set up a group policy for your workstation OUs which has that
setting enabled, and test. Microsoft.public.windows.group_policy would be a
better place to post, though (you don't want to do this with local policies)

 

[gs]

thx


"Lanwench [MVP - Exchange]"

does the following would help stopping users from using RDP to copy
data to local drive at home machines?
[Computer Configuration\Administrative Templates\Windows
Components\Terminal Services \Client/Server data redirection]

· Do not allow drive redirection

Recommended setting: Enabled

By default, Terminal Server maps client drives automatically upon
connection. It is recommended that you enable this policy to prevent
users from having easy access to applications on their local computer.



does the above work also on domain stations is set on the domain
server?

I believe so. Set up a group policy for your workstation OUs which has
that setting enabled, and test. Microsoft.public.windows.group_policy
would be a better place to post, though (you don't want to do this with
local policies)