Deny access to harddisk on workstation from a particular user

immortali · 06-24-2009, 02:10 AM

Hi,

I am currently trying to deny access for C:\ on workstations with users logging onto it with a particular user. How can I do this? I do not wish to enter each workstation locally and denying the harddisk on each workstation. Is there a policy for this?

Thankyou,
Immortali

I am using Windows Server 2003, whilst the workstations are running Windows XP

**vladimirb** · 06-24-2009, 02:21 AM

Hello...
Yes you can put all workstations in one group and create a path rule for C: directory in new Security Template and apply this template to this group which contains workstations...
Because C: directory is not movable, you do not have to use hash rule, just path rule...

Keep us posted...

immortali · 06-24-2009, 04:34 AM

Hi,
Thanks for this...

What we did is the following:

We have added all machines to a policy.
Opened mmc
Added the Security Template snap in
Created a new Security Template
In the File systems added C:\ and denied the Write access to the user
Chose replace existing policy
Imported the Security Template into the Policy

All worked wonderful....

Thanks

**vladimirb** · 06-24-2009, 04:46 AM

Nice one :D

06-24-2009, 02:10 AM	#1 (permalink)
immortali Registered User Join Date: May 2006 Location: Malta Posts: 30 OS: Windows Vista X86 Ultimate	Deny access to harddisk on workstation from a particular user Hi, I am currently trying to deny access for C:\ on workstations with users logging onto it with a particular user. How can I do this? I do not wish to enter each workstation locally and denying the harddisk on each workstation. Is there a policy for this? Thankyou, Immortali I am using Windows Server 2003, whilst the workstations are running Windows XP

06-24-2009, 02:21 AM	#2 (permalink)
vladimirb Mentor Hardware Team Join Date: Mar 2008 Location: Banja Luka, Serb Republic Posts: 3,661 OS: xp pro sp3, Server 2003, Windows 7 Professional x64bit My System	Re: Deny access to harddisk on workstation from a particular user Hello... Yes you can put all workstations in one group and create a path rule for C: directory in new Security Template and apply this template to this group which contains workstations... Because C: directory is not movable, you do not have to use hash rule, just path rule... Keep us posted... __________________ MCP - MCSA Cisco SMB Account Manager

06-24-2009, 04:34 AM	#3 (permalink)
immortali Registered User Join Date: May 2006 Location: Malta Posts: 30 OS: Windows Vista X86 Ultimate	Re: Deny access to harddisk on workstation from a particular user Hi, Thanks for this... What we did is the following: We have added all machines to a policy. Opened mmc Added the Security Template snap in Created a new Security Template In the File systems added C:\ and denied the Write access to the user Chose replace existing policy Imported the Security Template into the Policy All worked wonderful.... Thanks

06-24-2009, 04:46 AM	#4 (permalink)
vladimirb Mentor Hardware Team Join Date: Mar 2008 Location: Banja Luka, Serb Republic Posts: 3,661 OS: xp pro sp3, Server 2003, Windows 7 Professional x64bit My System	Re: Deny access to harddisk on workstation from a particular user Nice one :D __________________ MCP - MCSA Cisco SMB Account Manager