Restricting rights to the local "c" drive

[Guest]

Has anyone restricted the rights to the local disk? Meaning, have you taken
away all rights to the root of any local disk so your users cannot create or
delete any files. The only location where they would have rights would be the
"Documents and Settings" directory.

Thank you in advance,
Eric

 

[John John]

All users need read permissions to the %systemroot% folder and its
subfolders or else they will not be able to boot the computer. As for
the root of the system drive, I will have to check but I beleive that
they also need read permission there if the paging file is there.

John

 

[Guest]

Thank you for the response. I'm adding our "domain users" group to the local
"users" group. But I've been told that our users should not have the right to
create folders on the "c" drive. They will still have "read" rights to
everything, but that's it.

 

[John John]

So long as they have read permission they should be fine.

John

 

[Ace]

Note that many programs require read/write, read/write/modify, or even
full control on C:\Windows, C:\Windows\System, C:\Windows\System32, C:
\Program Files, etc., other related program paths and some registry
entries related to their installation, all depending on program.
Test, test, test..