| Author | Messages | |
win2kmaster
Posts:7
 | | 12/23/2005 2:59 AM |
| I would like to restrict more drives than just A, B, C, D via group
policy. However, I don't want to restrict access to all of them. I
know that I probably have to modify the system.adm file to add more
drives. I wish I knew where to go from there. Any help would be
greatly appreciated.
The drives by the way I want to restrict access to is A,B,C,D,L.
Thanks in advance.
--
Matt Johnson
win2kmaster@xxxxxxxxx
"Subtle and insubstantial, the expert leaves no trace; divinely
mysterious, he is inaudible. Thus he is the master of his enemy's
fate." ”Sun Tzu | | | |
| mkline
Posts:16
| | 12/23/2005 3:47 AM |
| | Message body was not found. | | | |
| AD00000466
Posts:0
| | 12/23/2005 4:01 AM |
| If memory serves....
You must edit the HideDrives value.
This is how you calculate the HideDrives value:
The registry key that this policy effects uses a decimal number which
corresponds to a 26 bit binary string, with each bit representing a drive
letter:
11111111111111111111111111
ZYXWVUTSRQPONMLKJIHGFEDCBA
The above configuration corresponds to 67108863 and will hide all drives. If
you only want to hide the drives: A, C, D, E, F, H and T you would do this:
00000010000000000010111101
ZYXWVUTSRQPONMLKJIHGFEDCBA
This would be 524477 in decimal number and hide the drives A, C, D, E, F, H
and T. This is the value that you type in as the NoDrives Value in the
policy template.
If you want to edit the system.adm template, remember that you have to edit
the .adm file on multiple places:
POLICY !!NoDrives
POLICY !!NoViewOnDrive
...and don't forget to edit the corresponding value in the [strings]
section.
Regards,
/Jimmy
------------------------------------------------
Jimmy Andersson, Principal Advisor - Q Advice AB
Microsoft MVP - Directory Services & Security
--------------- www.qadvice.com ----------------
________________________________
From: ActiveDir-owner@xxxxxxxxxxxxxxxxxx
[mailto:ActiveDir-owner@xxxxxxxxxxxxxxxxxx] On Behalf Of mike kline
Sent: Friday, December 23, 2005 4:46 PM
To: ActiveDir@xxxxxxxxxxxxxxxxxx
Subject: Re: [ActiveDir] Adding drives to restrict drives policy
You are right about the system.adm file
take a look at
http://support.microsoft.com/kb/q231289/
Using Group Policy Objects to hide specified drives in My Computer
for Windows 2000
You need to find out the Hexidecimal value for the drives you want
to hide
You can find the hex values here:
http://www.sd61.bc.ca/windows2000/HideDrives.htm
Hope this helps
Mike
On 12/23/05, Matt Johnson wrote:
I would like to restrict more drives than just A, B, C, D
via group
policy. However, I don't want to restrict access to all of
them. I
know that I probably have to modify the system.adm file to
add more
drives. I wish I knew where to go from there. Any help would
be
greatly appreciated.
The drives by the way I want to restrict access to is
A,B,C,D,L.
Thanks in advance.
--
Matt Johnson
win2kmaster@xxxxxxxxx
"Subtle and insubstantial, the expert leaves no trace;
divinely
mysterious, he is inaudible. Thus he is the master of his
enemy's
fate." -Sun Tzu
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ | | | |
| darren.marelia@xxxx.yyy
| | 12/23/2005 6:45 AM |
| ________________________________
From: ActiveDir-owner@xxxxxxxxxxxxxxxxxx on behalf of Jimmy Andersson
Sent: Fri 12/23/2005 7:59 AM
To: ActiveDir@xxxxxxxxxxxxxxxxxx
Subject: RE: [ActiveDir] Adding drives to restrict drives policy
If memory serves....
You must edit the HideDrives value.
This is how you calculate the HideDrives value:
The registry key that this policy effects uses a decimal number which
corresponds to a 26 bit binary string, with each bit representing a drive
letter:
11111111111111111111111111
ZYXWVUTSRQPONMLKJIHGFEDCBA
The above configuration corresponds to 67108863 and will hide all drives. If
you only want to hide the drives: A, C, D, E, F, H and T you would do this:
00000010000000000010111101
ZYXWVUTSRQPONMLKJIHGFEDCBA
This would be 524477 in decimal number and hide the drives A, C, D, E, F, H
and T. This is the value that you type in as the NoDrives Value in the
policy template.
If you want to edit the system.adm template, remember that you have to edit
the .adm file on multiple places:
POLICY !!NoDrives
POLICY !!NoViewOnDrive
...and don't forget to edit the corresponding value in the [strings]
section.
Regards,
/Jimmy
------------------------------------------------
Jimmy Andersson, Principal Advisor - Q Advice AB
Microsoft MVP - Directory Services & Security
--------------- www.qadvice.com ----------------
________________________________
From: ActiveDir-owner@xxxxxxxxxxxxxxxxxx
[mailto:ActiveDir-owner@xxxxxxxxxxxxxxxxxx] On Behalf Of mike kline
Sent: Friday, December 23, 2005 4:46 PM
To: ActiveDir@xxxxxxxxxxxxxxxxxx
Subject: Re: [ActiveDir] Adding drives to restrict drives policy
You are right about the system.adm file
take a look at
http://support.microsoft.com/kb/q231289/
Using Group Policy Objects to hide specified drives in My Computer
for Windows 2000
You need to find out the Hexidecimal value for the drives you want
to hide
You can find the hex values here:
http://www.sd61.bc.ca/windows2000/HideDrives.htm
Hope this helps
Mike
On 12/23/05, Matt Johnson wrote:
I would like to restrict more drives than just A, B, C, D
via group
policy. However, I don't want to restrict access to all of
them. I
know that I probably have to modify the system.adm file to
add more
drives. I wish I knew where to go from there. Any help would
be
greatly appreciated.
The drives by the way I want to restrict access to is
A,B,C,D,L.
Thanks in advance.
--
Matt Johnson
win2kmaster@xxxxxxxxx
"Subtle and insubstantial, the expert leaves no trace;
divinely
mysterious, he is inaudible. Thus he is the master of his
enemy's
fate." -Sun Tzu
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
> | | | |
|
|