Lock down hard drive

[Jackie]

How do I lock down the hard drive on a standalone machine
(can't use group policy) so users can't save files to C
drive?

Tried restricted user - didn't work.

 

[Steven L Umbach]

You can use Group Policy on a stand alone machine via gpedit.msc but by
default the policy will apply to all users, though there is a way to exempt
the administrator. However you really should be using ntfs file system and
user accounts to control access to your drive/folders keeping in mind that
anyone with any administrator credentials can access files that they do not
have permissions to by taking ownership first. Do not however change
permissions on the \winnt folder where users are already restricted and need
access to logon to the computer. Also be very careful with deny permissions
as administrators are also members of the users and everone groups. See the
link below for more details. Do NOT play with EFS encryption unless you
understand all the risks and know how to avoid them. --- Steve

http://support.microsoft.com/?id=300691