Using policy to hide drives

[SMA]

I'd like to hide server disk drives in a W2K TS/Citrix
server. Understand I can do this via policy. Can I have
the policy apply to a group on a particular server only?
I.e. I wouldn't want to hide the drives if the user logs
in on their own PC instead of the server.

In short I'd like the policy to apply to users only on the
Citrix server.

Is this doable?

TIA,
Steve

 

[Alan Sterling [MSFT]]

Steve:

Follow:
231289 Using Group Policy Objects to Hide Specified Drives in My Computer
for
http://support.microsoft.com/?id=231289

SYMPTOMS
========
In Windows 2000 there is a "Hide these specified drives in My Computer"
policy you can use to hide one or more logical drives. Although drives
hidden by this method are not visible in My Computer or Windows Explorer,
you can still obtain access to these drives from a command prompt or with
the Search tool.

RESOLUTION
==========
To resolve this issue, restrict use of drives with an Access Control
List (ACL) on an NTFS partition.

--
Alan Sterling---MCSE
Windows 2000 Directory Services
English - This posting is provided "AS IS" with no warranties, and confers
no rights. OR if you wish to include a script sample in your post please add
"Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm"

 

[Steve]

-----Original Message-----
Steve:

Follow:
231289 Using Group Policy Objects to Hide Specified Drives in My Computer
for
http://support.microsoft.com/?id=231289

SYMPTOMS
========
In Windows 2000 there is a "Hide these specified drives in My Computer"
policy you can use to hide one or more logical drives. Although drives
hidden by this method are not visible in My Computer or Windows Explorer,
you can still obtain access to these drives from a command prompt or with
the Search tool.

RESOLUTION
==========
To resolve this issue, restrict use of drives with an Access Control
List (ACL) on an NTFS partition.

--
Alan Sterling---MCSE
Windows 2000 Directory Services
English - This posting is provided "AS IS" with no warranties, and confers
no rights. OR if you wish to include a script sample in your post please add
"Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm"





.

Alan,
Thanks for the reply. If I implement the policy to hide
drives, how will I prevent the same policy from hiding
drives when that user logs on to the network on his own
PC? I think the answer is to put the Citrix servers in
their own OU, and apply the policy to the OU. Not sure
though -- I'm not a W2K policy wonk.

Regards,
Steve

 

[Vsevolod Titov [MSFT]]

To make user policy apply on Citrix server only and not apply on regular
user machines, use the same approach as for Windows Terminal Servers. This
is called loopback policy processing. Please check out these links:

http://support.microsoft.com/default.aspx?scid=kb;EN-US;231287

http://support.microsoft.com/default.aspx?scid=kb;en-us;260370

 

[Marco Perez]

Hi Hope You are OK, I was Browsing the system.adm file
and I realized that I can hide another letters by
modifying this file (not just the default letters) my
doubt is this how do I know the VALUE NUMERIC number that
the the file requests me, right now I would like to hide
volumen F it is my CDROM driver.
I am so grateful for your help, thanks

Here is the file

POLICY !!NoDrives
EXPLAIN !!NoDrives_Help
PART !!NoDrivesDropdown DROPDOWNLIST NOSORT
REQUIRED
VALUENAME "NoDrives"
ITEMLIST
NAME !!ABOnly VALUE NUMERIC 3
NAME !!COnly VALUE NUMERIC 4
NAME !!DOnly VALUE NUMERIC 8
NAME !!ABConly VALUE NUMERIC 7
NAME !!FConly VALUE NUMERIC ?

NAME !!ABCDOnly VALUE NUMERIC 15
NAME !!ALLDrives VALUE NUMERIC
67108863
;low 26 bits on (1 bit per drive)
NAME !!RestNoDrives VALUE NUMERIC 0
(Default)
END ITEMLIST
END PART
END POLICY

[strings]
ABCDOnly="Restrict A, B, C and D drives only"
ABConly="Restrict A, B and C drives only"
ABOnly="Restrict A and B drives only"
ALLDrives="Restrict all drives"
COnly="Restrict C drive only"
DOnly="Restrict D drive only"
FOnly="Restrict F drive only"

RestNoDrives="Do not restrict drives"