3

I would like to know what's the recommended solution for the following problem.

We do not want users to see (or at least not to modify) the drives D and E of a server they have remote access to.

However, the tools installed on that server still need to have access to those drives in order to be able to work properly.

8
  • There's a Group Policy setting you can enable to hide those drives from users. The setting does not prevent programmatic access to those drives.
    – joeqwerty
    Jan 25, 2019 at 17:11
  • Do you know which one? Does it also work for drive E?
    – Rickson
    Jan 25, 2019 at 17:17
  • 1
    gpsearch.azurewebsites.net/#2650
    – joeqwerty
    Jan 25, 2019 at 17:25
  • 1
    Right. There's a setting to restrict/hide access to all drives. That's the one you should use. It will prevent users from viewing and accessing all local drives in Windows/File Explorer, etc. It does not prevent programmatic access to those drives for SQL, Exchange, etc.
    – joeqwerty
    Jan 25, 2019 at 17:39
  • 2
    What about ACLs? Allow the users to read/write to the places they need to have access to and prevent access to everything else....
    – Sven
    Jan 25, 2019 at 17:50

1 Answer 1

0

This registry setting helped us to hide the drive letters: https://ss64.com/nt/syntax-nodrives.html

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .