Monday, January 19, 2009

Disable access to a drive

To prevent users from using My Computer, Explorer, Run, Map Network Drive to access the content of selected drives:

In the Windows Registry Editor (regedit) navigate to: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

Create a new DWORD Value named: NoViewOnDrive

The value for NoViewOnDrive needs to be calculated as follows:

A drive that needs to be hidden is represented by a binary 1.

ZYXWVUTSRQPONMLKJIHGFEDCBA
00000000000000000000100000

For example to hide drive F the value for NoDrives = 20 in hexadicimal

Windows Registry Editor Version 5.00 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] "NoViewOnDrive"=dword:00000020

To hide all drives except C, D and E the binary value is 11111111111111111111100011

So the value for NoDrives will be: 3FFFFE3

If a user tries to access the drive he will get a restriction warning stating "This operation has been cancelled due to restrictions in effect on this computer. Please contact your system administrator."

No comments:

Post a Comment