Prevent Access to C:

[Larry]

I am using windows 2000 server, xp pro workstations. I am
currently preventing access to the C:\ using the user
portion of the GPO. We recently added a few laptops that I
would like to apply the same policy but allow access to
the C:\. I tried created a laptop GPO and setting the
computer portion for preventing the C:\ to Disable. That
did not work. Is there any way to still prevent C:\ to all
users unless they are logged onto one of the laptops? I
know they can log onto the laptop locally and access the
C:\. That is what they are doing now but it would be much
more useful if they could access the C:\ while logged into
the domain. thanks alot

 

[Arild Bakken]

I am using windows 2000 server, xp pro workstations. I am
currently preventing access to the C:\ using the user
portion of the GPO. We recently added a few laptops that I
would like to apply the same policy but allow access to
the C:\. I tried created a laptop GPO and setting the
computer portion for preventing the C:\ to Disable. That
did not work. Is there any way to still prevent C:\ to all
users unless they are logged onto one of the laptops? I
know they can log onto the laptop locally and access the
C:\. That is what they are doing now but it would be much
more useful if they could access the C:\ while logged into
the domain. thanks alot

I'm guessing that the user setting is taking priority over the computer
setting. You need to create a separate GPO with the user setting disabled,
and use that GPO for the users that should be allowed to access the local c.
If this should apply to any user accessing a laptop, then you should look
into loopback processing.


Arild