Local Drives Access

[Hamins]

Hi,

I have a Windows2003 DC, and around 20 WinXP workstations. All the workstations have 2 partitions on the HDD, a CD-ROM drive , and a floppy drive. All the users on the net have roaming profiles, and home directory. All the work related data is stored in shared folders on the file server.

What I want is to deny the users, access to all local drives and folders, except for their profile folder that gets copied from the server onto the local PC, when the user's log in. The user's should be able to read/write/modify anything in their own profile folder. Ofcourse, the users should have read access to certain program, and system folders, but they should not have write access to them.

I want to know if this is possible, and how ? Is it through GPOs ?

Thanx

Edited August 5, 2005 by Hamins

[chilifrei64]

Open your group policy manager

go to User configuration-> Administrative Templates-> Windows components-> Windows Explorer

Enable "Hide these specivied drives in My Computer" and "Prevent Access to drives from My Computer" and configure accordingly

For Folder Permissions.. this is GPO too

Computer Configuration -> Windows Settings -> Security Settings -> File System

Set your permissions accordingly here.

[Hamins]

heya chilifrie,

Thnx once again. I knew these existed in the GPO, but just did'nt know where exactly.

Thnx!!