up vote 0 down vote favorite
share [g+] share [fb]

We are having some problems with securing our desktop machines. Each machine has a C-drive with a DATA folder in it.

We want our users to only be possible to access the data folder and not the root. In the data folder they have to propper rights.

We now use this vbs script:

    Set objShell = CreateObject("Wscript.Shell")

    objShell.Run "CACLS " & "c:\" & " /e /r ""geverifieerde gebruikers"" ", 0, True
    objShell.Run "CACLS " & "c:\MININT" & " /t /e /r ""geverifieerde gebruikers"" ", 0, True

But our users are still able to create folders in the root of the c drive.

Thanks

link|improve this question
It strikes me as a bad idea to completely restrict root drive access as some programs may break or give unexpected behavior... – Bart Silverstrim Sep 6 '11 at 12:02
What would you then suggest? We'd like them just to use that one folder (data) to store large files in. Other things on C must be off limits. – Reyntjensw Sep 6 '11 at 12:41
What exactly is the problem you're addressing, and on what scale? – Bart Silverstrim Sep 6 '11 at 12:42
It would be helpful to see the result rights on c:\ once these command run. – uSlackr Sep 6 '11 at 12:43
Members of "Authenticated Users" can create files and folders in the root of the C: drive by default. – jscott Sep 6 '11 at 12:44
show 2 more comments
feedback

Know someone who can answer? Share a link to this question via email, Google+, Twitter, or Facebook.

Your Answer

 
or
required, but never shown
discard

Browse other questions tagged or ask your own question.