GPO Question

celticfan11 · June 5th, 2008

What i need is for for all users to not beable to see the C drive. I can accomplish this VIA GPO no problem. However for 20 computers, Group X need to be able to see the C drive but i only want group X to be able to see the C drive on those 20 computers. How is this possible. I cant think of a clever way to do so.

**Henyman** · June 5th, 2008

1st create a new OU with all users that you dont want to be able to see the C drive (e.g everyone except "Group X"),
then apply the gpo to just that OU via a user configuration GPO, that will mean that only "group X" can see the c drive on any pc on the domain.

Next to lock it down even more make a 2nd New OU with all PC's in except the 20 you want "Group X" to have C Drive access to, then apply the same setting via computer configuration, this will mean "group x" wil only be able to see the c drive on the 20 pc's you have chosen.

that would work i think?

celticfan11 · June 5th, 2008

Originally Posted by Henyman

Create an OU with all users except the 20 you want to be able to see the C drive in, then apply the gpo to just that OU?

As the 20 users wont be in that OU then the GPO wont apply to them + they will be able to access the c drive.

but those 20 users can then see the C drive anywhere they login. I want limit them to seeing the C drive only on say 30 computers.

**Henyman** · June 5th, 2008

i just changed my post to make it clearer as you posted

celticfan11 · June 5th, 2008

except the hide C drive is a USER setting not a computer setting

**Henyman** · June 5th, 2008

hmmmm can it be done via a custom gpo? was searching round and found http://support.microsoft.com/default...n-us%3BQ231289

which i presume is what your using?

celticfan11 · June 5th, 2008

yes thats what im using... never made a custon GPO before

**Henyman** · June 5th, 2008

me either, but i would have thought it was possible to take the same setting + make it computer based?

*carries on with google*

celticfan11 · June 5th, 2008

Originally Posted by Henyman

me either, but i would have thought it was possible to take the same setting + make it computer based?

*carries on with google*

that would be ideal

celticfan11 · June 5th, 2008

well the catch to that would be that i still want other users to login to any pc AND be able to see the C drive.. a computer setting would thus defeat that

celticfan11 · June 5th, 2008

i think i got it..... what i did was restrict c drive access to everyone in my main group..... when you login a script runs and maps a Z drive to the local folder that those 20 users need access to. From there the users have no access to the C drive.. yet can work with the Z drive... which is actually a folder on the C drive... when they leave the lab a Z drive will not map because that local folder does not exsisit.

still need more testing but this may work

**Henyman** · June 5th, 2008

should work

**madmatt** · June 6th, 2008

Both of you get a cookie. Good tiems!

June 5th, 2008	Top \| #1
celticfan11 OSNN Senior Addict Joined: January 2003 Location: Vernon, CT Posts: 744 Reputation: 340 Power: 121	GPO Question What i need is for for all users to not beable to see the C drive. I can accomplish this VIA GPO no problem. However for 20 computers, Group X need to be able to see the C drive but i only want group X to be able to see the C drive on those 20 computers. How is this possible. I cant think of a clever way to do so. CPU: Intel 3.2GHz OC'd to 3.4GHz RAM: 1GB PC3200 Harddrive: .710TB combined Local and Network storage Video Card: Geforce 6800 GT 256MB RAM Motherboard: ASU P4P800 Sound: Onboard sound baby Monitor: Faithful 21 inches of PURE CRT Number of Programs Installed: 39 and growing: not counting games, (and yes i use them all)

June 5th, 2008	Top \| #2
Henyman Secret Goat Fetish Joined: June 2002 Location: Dorset, England Posts: More Than You Posts: 9,601 Reputation: 3548 Power: 249	Re: GPO Question 1st create a new OU with all users that you dont want to be able to see the C drive (e.g everyone except "Group X"), then apply the gpo to just that OU via a user configuration GPO, that will mean that only "group X" can see the c drive on any pc on the domain. Next to lock it down even more make a 2nd New OU with all PC's in except the 20 you want "Group X" to have C Drive access to, then apply the same setting via computer configuration, this will mean "group x" wil only be able to see the c drive on the 20 pc's you have chosen. that would work i think? http://Henyman.com

June 5th, 2008	Top \| #3
celticfan11 OSNN Senior Addict Joined: January 2003 Location: Vernon, CT Posts: 744 Reputation: 340 Power: 121	Re: GPO Question Originally Posted by Henyman Create an OU with all users except the 20 you want to be able to see the C drive in, then apply the gpo to just that OU? As the 20 users wont be in that OU then the GPO wont apply to them + they will be able to access the c drive. but those 20 users can then see the C drive anywhere they login. I want limit them to seeing the C drive only on say 30 computers. CPU: Intel 3.2GHz OC'd to 3.4GHz RAM: 1GB PC3200 Harddrive: .710TB combined Local and Network storage Video Card: Geforce 6800 GT 256MB RAM Motherboard: ASU P4P800 Sound: Onboard sound baby Monitor: Faithful 21 inches of PURE CRT Number of Programs Installed: 39 and growing: not counting games, (and yes i use them all)

June 5th, 2008	Top \| #4
Henyman Secret Goat Fetish Joined: June 2002 Location: Dorset, England Posts: More Than You Posts: 9,601 Reputation: 3548 Power: 249	Re: GPO Question i just changed my post to make it clearer as you posted http://Henyman.com

June 5th, 2008	Top \| #5
celticfan11 OSNN Senior Addict Joined: January 2003 Location: Vernon, CT Posts: 744 Reputation: 340 Power: 121	Re: GPO Question except the hide C drive is a USER setting not a computer setting CPU: Intel 3.2GHz OC'd to 3.4GHz RAM: 1GB PC3200 Harddrive: .710TB combined Local and Network storage Video Card: Geforce 6800 GT 256MB RAM Motherboard: ASU P4P800 Sound: Onboard sound baby Monitor: Faithful 21 inches of PURE CRT Number of Programs Installed: 39 and growing: not counting games, (and yes i use them all)

Latest News Posts

Latest Forum Posts

Latest Member Blogs

June 5th, 2008	Top \| #6
Henyman Secret Goat Fetish Joined: June 2002 Location: Dorset, England Posts: More Than You Posts: 9,601 Reputation: 3548 Power: 249	Re: GPO Question hmmmm can it be done via a custom gpo? was searching round and found http://support.microsoft.com/default...n-us%3BQ231289 which i presume is what your using? http://Henyman.com

June 5th, 2008	Top \| #7
celticfan11 OSNN Senior Addict Joined: January 2003 Location: Vernon, CT Posts: 744 Reputation: 340 Power: 121	Re: GPO Question yes thats what im using... never made a custon GPO before CPU: Intel 3.2GHz OC'd to 3.4GHz RAM: 1GB PC3200 Harddrive: .710TB combined Local and Network storage Video Card: Geforce 6800 GT 256MB RAM Motherboard: ASU P4P800 Sound: Onboard sound baby Monitor: Faithful 21 inches of PURE CRT Number of Programs Installed: 39 and growing: not counting games, (and yes i use them all)

June 5th, 2008	Top \| #8
Henyman Secret Goat Fetish Joined: June 2002 Location: Dorset, England Posts: More Than You Posts: 9,601 Reputation: 3548 Power: 249	Re: GPO Question me either, but i would have thought it was possible to take the same setting + make it computer based? carries on with google http://Henyman.com

June 5th, 2008	Top \| #9
celticfan11 OSNN Senior Addict Joined: January 2003 Location: Vernon, CT Posts: 744 Reputation: 340 Power: 121	Re: GPO Question Originally Posted by Henyman me either, but i would have thought it was possible to take the same setting + make it computer based? carries on with google that would be ideal CPU: Intel 3.2GHz OC'd to 3.4GHz RAM: 1GB PC3200 Harddrive: .710TB combined Local and Network storage Video Card: Geforce 6800 GT 256MB RAM Motherboard: ASU P4P800 Sound: Onboard sound baby Monitor: Faithful 21 inches of PURE CRT Number of Programs Installed: 39 and growing: not counting games, (and yes i use them all)

June 5th, 2008	Top \| #10
celticfan11 OSNN Senior Addict Joined: January 2003 Location: Vernon, CT Posts: 744 Reputation: 340 Power: 121	Re: GPO Question well the catch to that would be that i still want other users to login to any pc AND be able to see the C drive.. a computer setting would thus defeat that CPU: Intel 3.2GHz OC'd to 3.4GHz RAM: 1GB PC3200 Harddrive: .710TB combined Local and Network storage Video Card: Geforce 6800 GT 256MB RAM Motherboard: ASU P4P800 Sound: Onboard sound baby Monitor: Faithful 21 inches of PURE CRT Number of Programs Installed: 39 and growing: not counting games, (and yes i use them all)

June 5th, 2008	Top \| #11
celticfan11 OSNN Senior Addict Joined: January 2003 Location: Vernon, CT Posts: 744 Reputation: 340 Power: 121	Re: GPO Question i think i got it..... what i did was restrict c drive access to everyone in my main group..... when you login a script runs and maps a Z drive to the local folder that those 20 users need access to. From there the users have no access to the C drive.. yet can work with the Z drive... which is actually a folder on the C drive... when they leave the lab a Z drive will not map because that local folder does not exsisit. still need more testing but this may work CPU: Intel 3.2GHz OC'd to 3.4GHz RAM: 1GB PC3200 Harddrive: .710TB combined Local and Network storage Video Card: Geforce 6800 GT 256MB RAM Motherboard: ASU P4P800 Sound: Onboard sound baby Monitor: Faithful 21 inches of PURE CRT Number of Programs Installed: 39 and growing: not counting games, (and yes i use them all)

June 5th, 2008	Top \| #12
Henyman Secret Goat Fetish Joined: June 2002 Location: Dorset, England Posts: More Than You Posts: 9,601 Reputation: 3548 Power: 249	Re: GPO Question should work http://Henyman.com

June 6th, 2008	Top \| #13
madmatt Bow Down to the King Joined: April 2002 Location: New York Posts: 13,312 Reputation: 4090 Power: 294	Re: GPO Question Both of you get a cookie. Good tiems!

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
The question thats as popular as the "Which cpu" question	Syrus	Graphics Cards	2	January 3rd, 2004 9:59pm
Text box question and stats question	Timeo27	Web Design & Coding	2	February 21st, 2003 12:17am