GPO Question

Discussion in 'Windows Server Systems' started by celticfan11, Jun 5, 2008.

  1. celticfan11

    celticfan11 Moderator

    Messages:
    744
    Location:
    Vernon, CT
    What i need is for for all users to not beable to see the C drive. I can accomplish this VIA GPO no problem. However for 20 computers, Group X need to be able to see the C drive but i only want group X to be able to see the C drive on those 20 computers. How is this possible. I cant think of a clever way to do so.
     
  2. Henyman

    Henyman Secret Goat Fetish Political User

    1st create a new OU with all users that you dont want to be able to see the C drive (e.g everyone except "Group X"),
    then apply the gpo to just that OU via a user configuration GPO, that will mean that only "group X" can see the c drive on any pc on the domain.

    Next to lock it down even more make a 2nd New OU with all PC's in except the 20 you want "Group X" to have C Drive access to, then apply the same setting via computer configuration, this will mean "group x" wil only be able to see the c drive on the 20 pc's you have chosen.

    that would work i think?
     
  3. celticfan11

    celticfan11 Moderator

    Messages:
    744
    Location:
    Vernon, CT

    but those 20 users can then see the C drive anywhere they login. I want limit them to seeing the C drive only on say 30 computers.
     
  4. Henyman

    Henyman Secret Goat Fetish Political User

    i just changed my post to make it clearer as you posted :D
     
  5. celticfan11

    celticfan11 Moderator

    Messages:
    744
    Location:
    Vernon, CT
    except the hide C drive is a USER setting not a computer setting :(
     
  6. Henyman

    Henyman Secret Goat Fetish Political User

  7. celticfan11

    celticfan11 Moderator

    Messages:
    744
    Location:
    Vernon, CT
    yes thats what im using... never made a custon GPO before
     
  8. Henyman

    Henyman Secret Goat Fetish Political User

    me either, but i would have thought it was possible to take the same setting + make it computer based?


    *carries on with google*
     
  9. celticfan11

    celticfan11 Moderator

    Messages:
    744
    Location:
    Vernon, CT
    that would be ideal
     
  10. celticfan11

    celticfan11 Moderator

    Messages:
    744
    Location:
    Vernon, CT
    well the catch to that would be that i still want other users to login to any pc AND be able to see the C drive.. a computer setting would thus defeat that
     
  11. celticfan11

    celticfan11 Moderator

    Messages:
    744
    Location:
    Vernon, CT
    i think i got it..... what i did was restrict c drive access to everyone in my main group..... when you login a script runs and maps a Z drive to the local folder that those 20 users need access to. From there the users have no access to the C drive.. yet can work with the Z drive... which is actually a folder on the C drive... when they leave the lab a Z drive will not map because that local folder does not exsisit.


    still need more testing but this may work :)
     
    madmatt likes this.
  12. Henyman

    Henyman Secret Goat Fetish Political User

    should work :D
     
    madmatt and celticfan11 like this.
  13. madmatt

    madmatt Bow Down to the King Political User

    Messages:
    13,312
    Location:
    New York
    Both of you get a cookie. Good tiems!