Simple Question......one would think!

[SIME U via WinServerKB.com]

Hi Group

I want to apply a GPO which removes all drives from mycomp except the mapped
drive I have set up. Both the policy pertaining to hiding (or preventing
access to) drives in mycomp only seem to give the option for drives a thru d
in the drop down list

I have drives e,f,g that I also need to hide but the policy on gives the
option to hide drives a.b.c.d or all (ie every drive)

Iam surely missing something as many laptops and stuff have card readers
which make it necessary to hide more than drives a,b,c and d

I am running 2k3 DC with XPSP2 clients and am referring to these 2 policies

user configuration > admin templates > windows compnents > windows explorer >
hide these specified drives in mycomputer

user configuration > admin templates > windows compnents > windows explorer

prevent access to drives from mycomputer

I cant be the only person who has tried to hide a drive letter above d:??

Any suggestions would be geatly appreciated

Thx for your time

Regards

Si

 

[rwh]

There is a GP setting to hide specific drive letters. I'll try to
remember to post it tomorrow while I'm at the office, unless someone
else posts it first.

 

[Mark Heitbrink [MVP]]

Hi,

[nodrives, noviewondrives]
I cant be the only person who has tried to hide a drive letter above d:??

http://www.gruppenrichtlinien.de/HowTo/Laufwerke_ausblenden.htm

Scroll down ... theres a sample to hide:
A:, C:, F:, G: and M: and the other is "all" but H:

Edit the system.adm, nodrives and noviewondrives follow the same syntax.
It´s a 26 Bit mask, and an simple addition of the driveletter.
A=1, B=2, C=4, D=8 and so on.

Mark

 

[SIME U via WinServerKB.com]

Hi Mark

Thanks for your reply - having a little difficulty following that link as I
am uni lingual (ie only speak english!!) and I didnt want to rist dropping it
into babel fish or equivalent

It looks like just what I am after tho - when you say 26 bit mask I assume
this refers to the sequence of numbers which relate to the drive letters?
Maths was never my strong point....lol

In simple terms does the number which relates to the drive letter doubles as
you progess from a thru z?

also I have never editted an .adm before - is it just a text file or do I
need something specific

agian many thanks for your help

Regards

Hi,

[nodrives, noviewondrives]
I cant be the only person who has tried to hide a drive letter above d:??

http://www.gruppenrichtlinien.de/HowTo/Laufwerke_ausblenden.htm

Scroll down ... theres a sample to hide:
A:, C:, F:, G: and M: and the other is "all" but H:

Edit the system.adm, nodrives and noviewondrives follow the same syntax.
It´s a 26 Bit mask, and an simple addition of the driveletter.
A=1, B=2, C=4, D=8 and so on.

Mark

 

[Mark Heitbrink [MVP]]

Hi,

In simple terms does the number which relates to the drive letter doubles as
you progess from a thru z?

Yepp.
A: 1 B: 2 C: 4 D: 8 E: 16 F: 32 G: 64 H: 128 I: 256 J: 512
K: 1024 L: 2048 M: 4096 N: 8192 O: 16384 P: 32768 Q: 65536 R: 131072
S: 262144 T: 524288 U: 1048576 V: 2097152 W: 4194304 X: 8388608
Y: 16777216 Z: 33554432 All: 67108863 (all in addition)

also I have never editted an .adm before - is it just a text file or do I
need something specific

Plain Text. Notepad will work.

Search for nodrives and novieondrives and add you drives.
After that import the system.adm, even if it exists, so that
your new values are integrated. This will not efect any settings
that have been made before.

Mark

 

[SIME U via WinServerKB.com]

Hi

Excellent I now understand it all except1 little thing - where do I find
system.adm - sysvol?

Oh thats not the only thing what is the difference between nodrives and
novieondrives , plus all the stuff I have read says NEVER edit system.adm
directly - as this is a test LAN I assume its no big deal?

Ok that wasnt one little thing!!

I must thankyou for you quick and informative responses

Kind Regards

Si

 

[Mark Heitbrink [MVP]]

Hi,

Excellent I now understand it all except1 little thing - where do I find
system.adm - sysvol?

Usally on the local system, from where you edit the GPO.
A time a GPO is created and you open the administrative template
section within the GPO, a folder \adm is created inside the
%sysvol% ...\Guid of Policy\ and the local *.adm template
are copied to from %systemroot%\inf

Any GPO has it´s own templates.
Changing the local *.adm has no efect on existing GPOs.
You have to manually import them, or if it is manipulated, the
manipulated adm is imported at time create a new GPO and open
the adm section.

If you edit %systemroot%\inf\system.adm and you install a servicepack
the file will be replaced with the newer own from the servicepack.

So I think, the best way is:
- copy the local adm to a network share
- edit this copied files, to fit your wishes
- create a new GPO or take an existing one and import the
manipulated files from the share.
- so you can decide in which GPO you want to have the changed adm

If a SP comes up, copy them to the share and do the changes again

Mark