Preventing access to C: drive....?

[Philip Nunn]

Hello everyone,

I have a Windows 2003 Terminal Server setup and we are using roaming
profiles for all terminal users. Here is my problem: I have enabled the
group policy "User config>admin templates>Windows components>windows
explorer>Prevent access to specified drives" I have prohibited access to
the "C:" drive. Now when a user tries to open their "My Documents" folder
it gives them the error "..restrictions on the computer prevented access" I
can get around this by using Folder Redirection, but I still get the error
when users access this dir. "C:\%userprofile%\local settings\application
data" is there a workaround, or does anyone know a fix because you cannot
redirect this folder and I need to fix this problem badly. I also dont want
to set the GP "Computer config>windows settings>security settings>file
system" because if I give the users unrestricted access to the doc's and
settings path then they can look in other users profiles which is not
acceptable. Please help! (sorry if its kinda confusing)

Philip Nunn

 

[Ray Lava [MSFT]]

Philip,

1. You can use folder redirection to redirect the application data of your
users

2. Put the users' roaming profiles on a different drive. You can do this
by changing the path in the registry for
HKLM/software/microsoft/windowsnt/currentversion/profilelist. Find the
correct SID for the user in question and then change that user's
profileimagepath to the new location. Of course, you will need to copy the
entire profile to the new location and make sure that the user has full
control of his own profile.

I hope this helps.

Ray Lava
Microsoft Corporation

This posting is provided "AS IS" with no warranties, and confers no rights