Re: [ActiveDir] Adding drives to restrict drives policy
You are right about the system.adm file take a look at http://support.microsoft.com/kb/q231289/ Using Group Policy Objects to hide specified drives in My Computer for Windows 2000 You need to find out the Hexidecimal value for the drives you want to hide You can find the hex values here: http://www.sd61.bc.ca/windows2000/HideDrives.htm Hope this helps Mike On 12/23/05, Matt Johnson [EMAIL PROTECTED] wrote: I would like to restrict more drives than just A, B, C, D via grouppolicy. However, I don't want to restrict access to all of them. I know that I probably have to modify the system.adm file to add moredrives. I wish I knew where to go from there. Any help would begreatly appreciated.The drives by the way I want to restrict access to is A,B,C,D,L. Thanks in advance.--Matt Johnson[EMAIL PROTECTED]Subtle and insubstantial, the expert leaves no trace; divinelymysterious, he is inaudible. Thus he is the master of his enemy's fate. —Sun Tzu
RE: [ActiveDir] Adding drives to restrict drives policy
If memory serves You must edit the HideDrives value. This is how you calculate the HideDrives value: The registry key that this policy effects uses a decimal number which corresponds to a 26 bit binary string, with each bit representing a drive letter: 11 ZYXWVUTSRQPONMLKJIHGFEDCBA The above configuration corresponds to 67108863 and will hide all drives. If you only want to hide the drives: A, C, D, E, F, H and T you would do this: 0010001001 ZYXWVUTSRQPONMLKJIHGFEDCBA This would be 524477 in decimal number and hide the drives A, C, D, E, F, H and T. This is the value that you type in as the NoDrives Value in the policy template. If you want to edit the system.adm template, remember that you have to edit the .adm file on multiple places: POLICY !!NoDrives POLICY !!NoViewOnDrive ...and don't forget to edit the corresponding value in the [strings] section. Regards, /Jimmy Jimmy Andersson, Principal Advisor - Q Advice AB Microsoft MVP - Directory Services Security --- www.qadvice.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of mike kline Sent: Friday, December 23, 2005 4:46 PM To: ActiveDir@mail.activedir.org Subject: Re: [ActiveDir] Adding drives to restrict drives policy You are right about the system.adm file take a look at http://support.microsoft.com/kb/q231289/ http://support.microsoft.com/kb/q231289/ Using Group Policy Objects to hide specified drives in My Computer for Windows 2000 You need to find out the Hexidecimal value for the drives you want to hide You can find the hex values here: http://www.sd61.bc.ca/windows2000/HideDrives.htm Hope this helps Mike On 12/23/05, Matt Johnson [EMAIL PROTECTED] wrote: I would like to restrict more drives than just A, B, C, D via group policy. However, I don't want to restrict access to all of them. I know that I probably have to modify the system.adm file to add more drives. I wish I knew where to go from there. Any help would be greatly appreciated. The drives by the way I want to restrict access to is A,B,C,D,L. Thanks in advance. -- Matt Johnson [EMAIL PROTECTED] Subtle and insubstantial, the expert leaves no trace; divinely mysterious, he is inaudible. Thus he is the master of his enemy's fate. -Sun Tzu List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] Adding drives to restrict drives policy
Also, I would recommend that you not edit the system.adm file directly to make this change. This is because the next time MS updates system.adm, your changes will be overwritten. So, best bet is to copy and paste the hide drives policy into a separate ADM and edit it from there. Darren From: [EMAIL PROTECTED] on behalf of Jimmy Andersson Sent: Fri 12/23/2005 7:59 AM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Adding drives to restrict drives policy If memory serves You must edit the HideDrives value. This is how you calculate the HideDrives value: The registry key that this policy effects uses a decimal number which corresponds to a 26 bit binary string, with each bit representing a drive letter: 11 ZYXWVUTSRQPONMLKJIHGFEDCBA The above configuration corresponds to 67108863 and will hide all drives. If you only want to hide the drives: A, C, D, E, F, H and T you would do this: 0010001001 ZYXWVUTSRQPONMLKJIHGFEDCBA This would be 524477 in decimal number and hide the drives A, C, D, E, F, H and T. This is the value that you type in as the NoDrives Value in the policy template. If you want to edit the system.adm template, remember that you have to edit the .adm file on multiple places: POLICY !!NoDrives POLICY !!NoViewOnDrive ...and don't forget to edit the corresponding value in the [strings] section. Regards, /Jimmy Jimmy Andersson, Principal Advisor - Q Advice AB Microsoft MVP - Directory Services Security --- www.qadvice.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of mike kline Sent: Friday, December 23, 2005 4:46 PM To: ActiveDir@mail.activedir.org Subject: Re: [ActiveDir] Adding drives to restrict drives policy You are right about the system.adm file take a look at http://support.microsoft.com/kb/q231289/ http://support.microsoft.com/kb/q231289/ Using Group Policy Objects to hide specified drives in My Computer for Windows 2000 You need to find out the Hexidecimal value for the drives you want to hide You can find the hex values here: http://www.sd61.bc.ca/windows2000/HideDrives.htm Hope this helps Mike On 12/23/05, Matt Johnson [EMAIL PROTECTED] wrote: I would like to restrict more drives than just A, B, C, D via group policy. However, I don't want to restrict access to all of them. I know that I probably have to modify the system.adm file to add more drives. I wish I knew where to go from there. Any help would be greatly appreciated. The drives by the way I want to restrict access to is A,B,C,D,L. Thanks in advance. -- Matt Johnson [EMAIL PROTECTED] Subtle and insubstantial, the expert leaves no trace; divinely mysterious, he is inaudible. Thus he is the master of his enemy's fate. -Sun Tzu List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ winmail.dat
