#151238 - 2005-11-10 07:35 AM
Re: Hide mapped drives
|
NTDOC
Administrator
   
Registered: 2000-07-28
Posts: 11625
Loc: CA
|
Well Les already gave you a clue. I would probably start with TWEAKUI 1.33 from Microsoft and install it on the TermServ and try to hide the drives from the user. If it works great, if not well then have to start doing some Google searching
Tweak UI 1.33
|
Top
|
|
|
|
#151239 - 2005-11-10 09:58 AM
Re: Hide mapped drives
|
Richard H.
Administrator
   
Registered: 2000-01-24
Posts: 4946
Loc: Leatherhead, Surrey, UK
|
On our Citrix farm we hide (and disable access to) a number of drives.
There are two registry keys which do this for you. Here are the entries that I use in my custom ADM template to restrict access to the system drive (C:), CD-ROM drive (N:) and software installation drive (O:): Code:
CLASS USER CATEGORY !!SGB_Bespoke CATEGORY !!SGB_Explorer KEYNAME "Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" POLICY !!SGB_Explorer_NoDrives PART !!SGB_Explorer_NoDrivesDropdown DROPDOWNLIST NOSORT REQUIRED VALUENAME "NoDrives" ITEMLIST NAME !!SGB_DriveList_C VALUE NUMERIC 4 NAME !!SGB_DriveList_CNO VALUE NUMERIC 24580 DEFAULT NAME !!SGB_DriveList_MNOP VALUE NUMERIC 61440 NAME !!SGB_DriveList_RestAllDrives VALUE NUMERIC 67108863 NAME !!SGB_DriveList_RestNoDrives VALUE NUMERIC 0 END ITEMLIST END PART END POLICY POLICY !!SGB_Explorer_NoViewOnDrive PART !!SGB_Explorer_NoDrivesDropdown DROPDOWNLIST NOSORT REQUIRED VALUENAME "NoViewOnDrive" ITEMLIST NAME !!SGB_DriveList_C VALUE NUMERIC 4 NAME !!SGB_DriveList_CNO VALUE NUMERIC 24580 DEFAULT NAME !!SGB_DriveList_MNOP VALUE NUMERIC 61440 NAME !!SGB_DriveList_RestAllDrives VALUE NUMERIC 67108863 NAME !!SGB_DriveList_RestNoDrives VALUE NUMERIC 0 END ITEMLIST END PART END POLICY END CATEGORY ; SGB_Explorer END CATEGORY ; SGB_Bespoke [strings] SGB_Bespoke="SGB Custom Settings" SGB_Explorer="Windows Explorer" SGB_Explorer_NoViewOnDrive="Prevent access to drives from My Computer" SGB_Explorer_NoDrives="Hide these specified drives in My Computer" SGB_Explorer_NoDrivesDropdown="Pick one of the following combinations" SGB_DriveList_C="Restrict C drive" SGB_DriveList_CNO="New Metaframe Restrictions (C,N and O drives)" SGB_DriveList_MNOP="Old Metaframe Restrictions (M,N,O and P drives)" SGB_DriveList_RestNoDrives="No restriction" SGB_DriveList_RestAllDrives="All restricted" ; vim600: ai ts=4 sw=4 filetype=conf
It's an extract from a much larger file, but all the relevant pieces should be there.
|
Top
|
|
|
|
#151242 - 2005-11-10 04:02 PM
Re: Hide mapped drives
|
Richard H.
Administrator
   
Registered: 2000-01-24
Posts: 4946
Loc: Leatherhead, Surrey, UK
|
I'd recommend using the ADM template that I posted above, either in GPO or as a NT style policy file.
I use the following script to calculate the number for the drive letter mask: Code:
Break ON ; Calculate drive letters for registry $sDrives="foo" While $sDrives "Enter drive letters: " GetS $sDrives $sDrives=UCase($sDrives) $iRegValue=0 While $sDrives $iDriveVal=Exp(2,ASC($sDrives)-ASC("A")) $iRegValue=$iRegValue+$iDriveVal Left($sDrives,1)+": "+$iDriveVal ? $sDrives=SubStr($sDrives,2) Loop If $iRegValue "Total: "+$iRegValue ? ? $sDrives="foo" EndIf Loop
Function Exp($x,$y) $Exp=1 While $y>0 $Exp=$Exp*$x $y=$y-1 Loop EndFunction
Exit 0
|
Top
|
|
|
|
Moderator: Arend_, Allen, Jochen, Radimus, Glenn Barnas, ShaneEP, Ruud van Velsen, Mart
|
0 registered
and 323 anonymous users online.
|
|
|