Allowing Specific Drive Instead of Restrict

[M P]

Hi!

I am looking for a way where I can allow specific drive on my desktop users
using Group Policy. For example, my desktop users have standard drives, A
(fdd), C(System Partition), D(Dedicated for Data), and E(CD Rom). Currently
I am using "Hide these specific drives in My Computer" and "Prevent access
to drives from MC" GP to do it. I just control access to C: drive. But now,
I want to reverse the policy. I wanted to specify specific drive that is
allowed (Drive D: and E: only) and others are hidden and cannot be accessed.
Is this possible in Group Policy? Btw, I am using Windows 2000 AD with
Windows 2000 and XP Prof workstations. Hope you might help.

MP

 

[Mark Heitbrink [MVP]]

Hi,

[...] I wanted to specify specific drive that is allowed (Drive D:
and E: only) and others are hidden and cannot be accessed.
Is this possible in Group Policy? Btw, I am using Windows 2000 AD with
Windows 2000 and XP Prof workstations. Hope you might help.

Yes. Edit the ADM and count "all" minus D+E

http://www.gruppenrichtlinien.de/HowTo/Laufwerke_ausblenden.htm

Scroll down ... theres a sample to hide:
A:, C:, F:, G: and M: and the other is "all" but H:

Edit the system.adm, nodrives and noviewondrives follow the same syntax.
It´s a 26 Bit mask, and an simple addition of the driveletter.
A=1, B=2, C=4, D=8 and so on.

Mark

 

[M P]

I can't understand the text. Do you have an english version?

Hi,

[...] I wanted to specify specific drive that is allowed (Drive D:
and E: only) and others are hidden and cannot be accessed.
Is this possible in Group Policy? Btw, I am using Windows 2000 AD with
Windows 2000 and XP Prof workstations. Hope you might help.

Yes. Edit the ADM and count "all" minus D+E

http://www.gruppenrichtlinien.de/HowTo/Laufwerke_ausblenden.htm

Scroll down ... theres a sample to hide:
A:, C:, F:, G: and M: and the other is "all" but H:

Edit the system.adm, nodrives and noviewondrives follow the same syntax.
It´s a 26 Bit mask, and an simple addition of the driveletter.
A=1, B=2, C=4, D=8 and so on.

Mark
--
Mark Heitbrink - MVP Windows Server
Homepage: www.gruppenrichtlinien.de
extend GPO: www.desktopstandard.com
PM: Vorname@Homepage, Versende-Adresse wird nicht abgerufen.

 

[probtem]

you my give usb a chance and give external drives a trie you can take
it with you"

I can't understand the text. Do you have an english version?

Hi,

[...] I wanted to specify specific drive that is allowed (Drive D:
and E: only) and others are hidden and cannot be accessed.
Is this possible in Group Policy? Btw, I am using Windows 2000 AD with
Windows 2000 and XP Prof workstations. Hope you might help.

Yes. Edit the ADM and count "all" minus D+E

http://www.gruppenrichtlinien.de/HowTo/Laufwerke_ausblenden.htm

Scroll down ... theres a sample to hide:
A:, C:, F:, G: and M: and the other is "all" but H:

Edit the system.adm, nodrives and noviewondrives follow the same syntax.
It´s a 26 Bit mask, and an simple addition of the driveletter.
A=1, B=2, C=4, D=8 and so on.

Mark
--
Mark Heitbrink - MVP Windows Server
Homepage: www.gruppenrichtlinien.de
extend GPO: www.desktopstandard.com
PM: Vorname@Homepage, Versende-Adresse wird nicht abgerufen.

 

[probtem]

you my give usb a chance and give external drives a trie you can take
it with you"

I can't understand the text. Do you have an english version?

Hi,

[...] I wanted to specify specific drive that is allowed (Drive D:
and E: only) and others are hidden and cannot be accessed.
Is this possible in Group Policy? Btw, I am using Windows 2000 AD with
Windows 2000 and XP Prof workstations. Hope you might help.

Yes. Edit the ADM and count "all" minus D+E

http://www.gruppenrichtlinien.de/HowTo/Laufwerke_ausblenden.htm

Scroll down ... theres a sample to hide:
A:, C:, F:, G: and M: and the other is "all" but H:

Edit the system.adm, nodrives and noviewondrives follow the same syntax.
It´s a 26 Bit mask, and an simple addition of the driveletter.
A=1, B=2, C=4, D=8 and so on.

Mark
--
Mark Heitbrink - MVP Windows Server
Homepage: www.gruppenrichtlinien.de
extend GPO: www.desktopstandard.com
PM: Vorname@Homepage, Versende-Adresse wird nicht abgerufen.

 

[Mark Heitbrink [MVP]]

I can't understand the text. Do you have an english version?

You don´t need the text, it´s just mathematics ;-)

If you want only D + E then its All (67108863) minus (D=(8) + E=(16))
-> 67108863 - 8 - 16 = 67108839

After that extend the ITEMLISTS on nodrives and noviewondrives
-> NAME "All but D: and E:" VALUE NUMERIC 67108839

Mark