Security

[Guest]

Currenyly, all my TS users can view all the folders on drive C:

I want to restrict my users on a terminal server to viewing only the shares
on that server that I created.

How can I do this?

Dale Allen

 

[Guest]

You can obscure the contents of the local hard drives, or any drive letter
accessible via Windows Explorer by using Group Policy, local policy or
registry edit.

These are purely asthetic changes, which do not prevent users from accessing
files by other means, so you should also lock down the local file system with
NTFS permissions. I always start with a standard locked-down build that I've
pre-configured and stored as an image. I then install applications and relax
security to "specific" files or registry locations as required to run the
applications.

DO NOT try to lock down the file system on a production server, as you will
most likely break installed programs.

http://www.workthin.com/tshta.htm

Patrick Rouse
Microsoft MVP - Terminal Server
http://www.workthin.com