Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I am using software from 2X to publish apps via RDS. I have enabled Drive Redirection so remote users can save files to their own local drives, but I want to disable remote users' access to server's drive. How shall I do this? Running Win Server 2008 R2. Thanks

share|improve this question

2 Answers 2

As long as the users aren't given excessive rights to the server computer they're going to have exceedingly limited access to write on the server computer-- basically to the user profile and subfolders there. If you've giving them more rights then you're going to be fighting a losing battle.

Attempting to remove the users' ability to write to their profile directories is going to end in heartburn for you, likely with applications not functioning properly.

The built-in OS filesystem permissions are going to take care of you and prevent users from blowing-up the server computer. Aside from that, it sounds like a management problem and not a technical problem-- users should save where they're told to.

Edit:

By all means, go ahead and use something "cosmetic" like the Group Policy setting suggested by Greg because it might make things a bit "cleaner", but don't grant users excessive rights irrespective of the "visibility" of the drive letters.

share|improve this answer

It is done the same way you would with a workstation. Use the following group policies:

"Hide these specified drives in My Computer"

"Prevent access to drives from My Computer"

share|improve this answer
2  
This is a good start, but both these policies are simple to get around. (By using a command prompt, for example.) Microsoft's explanation of these group policies explains this. http://gpsearch.azurewebsites.net/ TLDR: Use ACLs –  Ryan Ries Feb 27 '13 at 13:05

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.