Hiding/Preventing Access to Drives
You can use Group Policy settings to hide and restrict access to drives on the RD Session Host server. By enabling these settings you can ensure that users do not inadvertently access data stored on other drives, or delete or damage programs or other critical system files on drive C.
The following settings are located in the Group Policy Management Console underÂ
go to run and type gpmc.msc
if Group Policy Management Console not installed you can follow this guide to install here
->If you have an AD setup click on the + sign to the left of domains then + sign again beside the domain name
->Go to Group Policy Objects
->Right click the Group Policy if you have one configured alternatively just click on Default domain Policy then click edit
->Under User Configuration
-> Click the + sign beside Policies
->+ sign beside Administrative Templates
->+ sign beside Windows Components
->click Windows Explorer:
- Hide these specified drives in My Computer. You can remove the icons for specified drives from a user’s My Computer folder by enabling this setting and using the drop-down list to select the drives you would like to hide. However, this setting does not restrict access to these drives.
- Prevent access to drives from My Computer. Enable this setting to prevent users from accessing the chosen combination of drives. Use this setting to lock down the RD Session Host server for users accessing it for their primary desktop.
Applies to:
- Windows Server 2008 R2
- Windows Server 2008
- Windows Server 2003
