prevent hard disk access (C drive) for specific users

  • Thread starter Thread starter blackdir
  • Start date Start date
B

blackdir

Hi,
in the lobby of our company we would like to create an internet kiosk
where visitors can only run few (selected) applications with no
damnage for the machine they use. We can use a PC with XP Professional
already installed (or to be installed if needed).

I saw similar configuration in an internet point where not only few
application were installed and access to control panel and other
dangerous areas was prevented but also local hard disk access was
denied to the specific user account and USB flash drive were not
recognized.

I googled around finding some software that says that they can modify
user profile in order to implement such a limitation, but I didn't
find something that can do all the mentioned thing.

Can anyone suggest me some good program that can help me to do that?

thanks a lot,
blackdir
 
Hello :)

When you say "visitors" you mean all of them?? then you might want to try
with GPEDIT.MSC and start working from there.... if you try that option then
you should go to user configuration then Administrative "??????" (sorry,
can't translate from spanish) and once there you will find different options
(control panel, system, network, windows explorer, desktop) and others....
you customize depending your needs.

JR
 
Hello Jamie,
thanks for your prompt reply.

Hello :)

When you say "visitors" you mean all of them?? then you might want to try
with GPEDIT.MSC and start working from there....
Click to expand...

I found that in under User Configuration | Administrative Template |
Windows Components | Windows Explorer are the settings "Hide these
specified drives in My Computer" and "Prevent access to drives from My
Computer".

Now if I understood right, I need to do it for each user I want to
restrict access to the disks and on each computer I want to use...
correct?

Shall I log first to the PC as that user, or can I do it from my
administrator account on that PC?

Is there a way to do that for a specific user on whatever PC he logs?
(maybe configuring that in a login script or on the Active directory?

Thanks a lot,
blackdir
 
Hello,

All the settings you do affect ALL USERS, that's the only "curious" thing
about it. You need to log as Administrator user in order to run GPEDIT.MSC,
users with different privileges can not, either way, all the settings you do
will affect all users, including your admin user.

In order to make settings for specific users then you should go thru Active
Directory (which i don't have much knowledge about it, sorry i can't help
you there). All i can suggest is placing a shorcut for GPEDIT.MSC in your
admin user desktop, just in case you might need to re-touch your settings.
Maybe other gurus might help you with your issue through Active Directory or
GPO.

Sorry i can't help you further, hope this info is claryfing your doubts.

JR.
"blackdir" <[email protected]> escribió en el mensaje
Hello Jamie,
thanks for your prompt reply.

Hello :)

When you say "visitors" you mean all of them?? then you might want to try
with GPEDIT.MSC and start working from there....
Click to expand...

I found that in under User Configuration | Administrative Template |
Windows Components | Windows Explorer are the settings "Hide these
specified drives in My Computer" and "Prevent access to drives from My
Computer".

Now if I understood right, I need to do it for each user I want to
restrict access to the disks and on each computer I want to use...
correct?

Shall I log first to the PC as that user, or can I do it from my
administrator account on that PC?

Is there a way to do that for a specific user on whatever PC he logs?
(maybe configuring that in a login script or on the Active directory?

Thanks a lot,
blackdir
 
blackdir said:
Hi,
in the lobby of our company we would like to create an internet kiosk
where visitors can only run few (selected) applications with no
damnage for the machine they use. We can use a PC with XP Professional
already installed (or to be installed if needed).

I saw similar configuration in an internet point where not only few
application were installed and access to control panel and other
dangerous areas was prevented but also local hard disk access was
denied to the specific user account and USB flash drive were not
recognized.
Click to expand...

Hi.

Look at the Microsoft shared computer toolkit.
Or the newer version "Steady State"

We use this on public access library computers.
 
Back
Top