To prevent users from using My Computer, Explorer, Run, Map Network Drive to access the content of selected drives:
In the Windows Registry Editor (regedit) navigate to: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
Create a new DWORD Value named: NoViewOnDrive
The value for NoViewOnDrive needs to be calculated as follows:
A drive that needs to be hidden is represented by a binary 1.
ZYXWVUTSRQPONMLKJIHGFEDCBA
00000000000000000000100000
For example to hide drive F the value for NoDrives = 20 in hexadicimal
Windows Registry Editor Version 5.00 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] "NoViewOnDrive"=dword:00000020
To hide all drives except C, D and E the binary value is 11111111111111111111100011
So the value for NoDrives will be: 3FFFFE3
If a user tries to access the drive he will get a restriction warning stating "This operation has been cancelled due to restrictions in effect on this computer. Please contact your system administrator."
No comments:
Post a Comment