RE: [NTSysADM] Some advice needed about allowing local C: drive access

2017-02-17 Thread Webster
Or \\ip.ad.dr.ress\c$ that bypasses drive letter blocking. Thanks Carl Webster Citrix Technology Professional http://www.CarlWebster.com The Accidental Citrix Admin -Original Message- From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of James

Re: [NTSysADM] Some advice needed about allowing local C: drive access

2017-02-17 Thread Michael Leone
The GPO about hiding drives is for A,B,C only. We use Z: as a profile drive (folder redirected to network storage). We don't allow regular users access to the command prompt, either, so the Help Desk can't issue that command. On Fri, Feb 17, 2017 at 12:45 PM, Erik Goldoff

RE: [NTSysADM] Some advice needed about allowing local C: drive access

2017-02-17 Thread Webster
A Deny? Webster -Original Message- From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of Michael Leone Sent: Friday, February 17, 2017 11:34 AM To: ntsysadm@lists.myitforum.com Subject: [NTSysADM] Some advice needed about allowing local C: drive

RE: [NTSysADM] Some advice needed about allowing local C: drive access

2017-02-17 Thread James Rankin
Why don't they just browse to \\hostname\c$? -Original Message- From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of Michael Leone Sent: 17 February 2017 17:34 To: ntsysadm@lists.myitforum.com Subject: [NTSysADM] Some advice needed about allowing

RE: [NTSysADM] Some advice needed about allowing local C: drive access

2017-02-17 Thread Kennedy, Jim
I would put a security filter on the GPO where the domain user in question has read, but not apply perms on that GPO. Well, I would create a group and put that user in that group...but you get the idea. -Original Message- From: listsad...@lists.myitforum.com

Re: [NTSysADM] Some advice needed about allowing local C: drive access

2017-02-17 Thread Erik Goldoff
use the SUBST command ? SUBST Z: c:\debug worth testing to see if you have access using Z: or does your GPO quash this method ? On Fri, Feb 17, 2017 at 12:34 PM, Michael Leone wrote: > I know I've read about this procedure somewhere, but I'm not finding > it at the

[NTSysADM] Some advice needed about allowing local C: drive access

2017-02-17 Thread Michael Leone
I know I've read about this procedure somewhere, but I'm not finding it at the moment. We have this application that writes out it's debug log to c:\debug. Now, we hide drive C; from domain users using GPO (User Configuration/Policies/Administrative Policies/Windows Components/File Explorer/Hide

[NTSysADM] RE: tab in IE11

2017-02-17 Thread Melvin Backus
I'm not sure you can do this in IE11 as that functionality was supposedly removed, but this might work as alternative for your (possibly broken) program. Not direct GPO but if it works it's a starting point. https://ewingco.wordpress.com/2013/11/26/how-to-disable-tab-browsing-ie-11/ From: