Removing Drive letters using GPO

Discussion in 'Software' started by loneferret, Mar 19, 2009.

  1. loneferret

    loneferret Byte Poster

    139
    1
    27
    Hey there, don't know if I'm in the right section of the forum... if not sorry.

    Got a question, I need to remove access (or at least hide) a few drives using GPO.
    Windows 2003 server and it's up to date.

    I've managed to hide drives ABCD, but the thing is I need to remove access to
    drives such as V: H: and K: using GPOs. Can't seem to find anything.
    It was suggested to me that I edit a ADM file... and that lost me, just by the shear amount
    of files with this extension.

    So if anyone understands what I'm asking (tired as hell right now), hope you can help me out.
    Ask away if you need more info.

    Thanks :)
     
    Certifications: MCDST/N+/L+/i-Net+/CIW/OSCP/OSCE
    WIP: MCTS 70-662
  2. Sparky
    Highly Decorated Member Award 500 Likes Award

    Sparky Zettabyte Poster Moderator

    10,718
    543
    364
    Hmm, could you give us some more info mate.

    Is this a GPO for workstations or are you locking down a Terminal Server?
     
    Certifications: MSc MCSE MCSA:M MCSA:S MCITP:EA MCTS(x5) MS-900 AZ-900 Security+ Network+ A+
    WIP: Microsoft Certs
  3. loneferret

    loneferret Byte Poster

    139
    1
    27
    I'll do my best, at home right now and dead tired.. lol So I'll do my best explain so bare with me.

    Several workstations login in to a domain, some workstations need V: (and other letters) removed where as a few
    need access to V: Access to ABCD have been removed, so that' s ok..
    hmmm what else. No roaming profiles..
    Anything else?
     
    Certifications: MCDST/N+/L+/i-Net+/CIW/OSCP/OSCE
    WIP: MCTS 70-662
  4. Sparky
    Highly Decorated Member Award 500 Likes Award

    Sparky Zettabyte Poster Moderator

    10,718
    543
    364
    What is V: ? Is it a mapped drive?
     
    Certifications: MSc MCSE MCSA:M MCSA:S MCITP:EA MCTS(x5) MS-900 AZ-900 Security+ Network+ A+
    WIP: Microsoft Certs
  5. loneferret

    loneferret Byte Poster

    139
    1
    27
    Local hard drive...don't ask why it's V ... can't change drive letter either.
    Some people just can't accept change... lol
     
    Certifications: MCDST/N+/L+/i-Net+/CIW/OSCP/OSCE
    WIP: MCTS 70-662
  6. Sparky
    Highly Decorated Member Award 500 Likes Award

    Sparky Zettabyte Poster Moderator

    10,718
    543
    364
    LOL, WTF? :biggrin

    Anyways...

    Have you been to User Configuration\Administrative Templates\Windows Components\Windows Explorer in the GPO?

    Linky:
    http://technet.microsoft.com/en-us/library/cc978514.aspx
     
    Certifications: MSc MCSE MCSA:M MCSA:S MCITP:EA MCTS(x5) MS-900 AZ-900 Security+ Network+ A+
    WIP: Microsoft Certs
  7. loneferret

    loneferret Byte Poster

    139
    1
    27
    Think I did. But that just prevents access to ABCD I think... :eek:
    I'll look at the link closer, and I'll re-post here a little later. Unless you find something
    better... LOL
    Thanks for the help btw :oops:
    I try to follow the "RTFM" rule, but this one is just over my little head for some reason.
     
    Certifications: MCDST/N+/L+/i-Net+/CIW/OSCP/OSCE
    WIP: MCTS 70-662
  8. Sparky
    Highly Decorated Member Award 500 Likes Award

    Sparky Zettabyte Poster Moderator

    10,718
    543
    364
    Cool, have a look mate and if it doesnt work make a note of what drive letters you can block in that part of the GPO.
     
    Certifications: MSc MCSE MCSA:M MCSA:S MCITP:EA MCTS(x5) MS-900 AZ-900 Security+ Network+ A+
    WIP: Microsoft Certs
  9. loneferret

    loneferret Byte Poster

    139
    1
    27
    That part of the GPO is for ABCD with a few variants such as C only, D only, C & D.
    LOL Forgot that I have windows 2003 install at my place, so I'm looking at it now.

    Like I said in my original post, apparently I can edit some ADM file and add the drive letters
    so they can be added to that part of the GPO... Guess I guess edit/test it at my place (man my
    boss better appreciate what I'm doing... lol)
     
    Certifications: MCDST/N+/L+/i-Net+/CIW/OSCP/OSCE
    WIP: MCTS 70-662
  10. Sparky
    Highly Decorated Member Award 500 Likes Award

    Sparky Zettabyte Poster Moderator

    10,718
    543
    364
    The real question is: why is the local drive V:?

    Weird! :biggrin
     
    Certifications: MSc MCSE MCSA:M MCSA:S MCITP:EA MCTS(x5) MS-900 AZ-900 Security+ Network+ A+
    WIP: Microsoft Certs
  11. loneferret

    loneferret Byte Poster

    139
    1
    27
    True, if I say E: would it be better?
    It's some accounting application that needed some weird a** drive letter as far
    as I can tell. :dry
     
    Certifications: MCDST/N+/L+/i-Net+/CIW/OSCP/OSCE
    WIP: MCTS 70-662
  12. loneferret

    loneferret Byte Poster

    139
    1
    27
    Ok! think i found it... well half way there.
    edit: system.adm
    Added the numeric value to the drive list. In my home test E with the numeric value of 31 (include all drive ABCDE)
    added the string in the menu itself so the group policy editor doesn't give an error.
    Now if it works in my little network, all I'll need to do is find the value for V LOL
    That and hope that I edit the correct system.adm since there are quite a few on the sever...
     
    Certifications: MCDST/N+/L+/i-Net+/CIW/OSCP/OSCE
    WIP: MCTS 70-662
  13. Sparky
    Highly Decorated Member Award 500 Likes Award

    Sparky Zettabyte Poster Moderator

    10,718
    543
    364
    I dont have access to a server running Server 2003 but on my Server 2008 DC I get the option of 'restrict all drives' in the same part of the GPO I noted above.

    Know what mean about some applications needing access to a weird drive letter. In some cases you can map a drive to the local drive (sounds crazy!) to get around that problem and still keep the usual C: for the system drive.
     
    Certifications: MSc MCSE MCSA:M MCSA:S MCITP:EA MCTS(x5) MS-900 AZ-900 Security+ Network+ A+
    WIP: Microsoft Certs
  14. Sparky
    Highly Decorated Member Award 500 Likes Award

    Sparky Zettabyte Poster Moderator

    10,718
    543
    364
    Looking good mate :thumbleft
     
    Certifications: MSc MCSE MCSA:M MCSA:S MCITP:EA MCTS(x5) MS-900 AZ-900 Security+ Network+ A+
    WIP: Microsoft Certs
  15. loneferret

    loneferret Byte Poster

    139
    1
    27
    WOO HOO! It worked! now I can stop working for free! LOL
    Funny, how just bouncing ones problems off others and the solutions comes.
    Thanks again for reading my rants...
    Anyway was able to modify the ADM to add the E drive.. tomorrow I'll get paid to
    figure out the V
    oh yeah some workstations have H and K :dry
     
    Certifications: MCDST/N+/L+/i-Net+/CIW/OSCP/OSCE
    WIP: MCTS 70-662

Share This Page

Loading...
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.