how should i go about this....?

[hellarda]

Hi me again,

Purpose of this thread is to describe what i have installed ATM and how to do what i would like

atm i have:

Dell Poweredge 2850 running datacenter 2008 r2
and a
Intel Sr2300 running datacenter 2008 (not r2 as it is only 32 bit )

We have 3 clients (soon to be about 6) in the house and i want to be able to have any one in my family log onto any client and be able to access their files, this is kind of like the system at my school.

I have set up the r2 server as the primary DC and dns server and joined the intel server to it as a secondary DC and dns server

all clients are connected to the domain and all point to the two servers for primary and alternate DNS they are all running win 7 ultimate

i have created user accounts for all of us, and in the properties of the users have set the profile to be found in \\2008-x86-SERVER\User Home Directories\<username>

All user profiles are stored on the intel server

When i log onto one of the clients it maps the network drive H: to the home directory, which is what i intended

now what i want to do is to be able to make sure that the user CANNOT save to the C Drive and they can only access theyre profile on the Server

how do i go about doing this? i assume i will have to use GPO to disable access to the C: Drive? (also how to disable the libraries in win 7? or to change them so they point to the server?)

any help much appricated

ta

ali

 

[Sin_Chase]

GPO to lock down the C drive.

You probably want to hide it as oppose to prevent write access as this may well break some applications - Depends what you are running though.

The profile directories should be auto created when you set-up the user and have the appropriate permissions set. If not, just set them manually on a per folder level.

 

[hellarda]

hi, ok thanks

is it possible to lock down the c drive to users but not applications?

and how to i create the group policy and apply it? do i just need to make a new policy?

the libraries always open to the local user on C drive though :/

cheers

 

[Sin_Chase]

Create a policy on an OU and filter it down to the users you want it to apply to. Good place is on the users container if it's just a user policy for example.

It's been a long while since I last messed with GPOs and to be perfectly honest I've not kept up on what's changed in 2008 onwards. You may well be able to do much more granular control of C: drive access so I would not want to say otherwise.

I imagine a lot of new features in the GPO will of evolved with Windows 7 so I owuld be surprised if there was not something in there somewhere Best bet is to hit up google, if there is no MS solution I am sure someone has something viable.