Also, I would recommend that you not edit the system.adm file directly to make this change. This is because the next time MS updates system.adm, your changes will be overwritten. So, best bet is to copy and paste the hide drives policy into a separate ADM and edit it from there. Darren
________________________________
From: [EMAIL PROTECTED] on behalf of Jimmy Andersson
Sent: Fri 12/23/2005 7:59 AM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Adding drives to restrict drives policy
If memory serves....
You must edit the HideDrives value.
This is how you calculate the HideDrives value:
The registry key that this policy effects uses a decimal number which
corresponds to a 26 bit binary string, with each bit representing a drive
letter:
11111111111111111111111111
ZYXWVUTSRQPONMLKJIHGFEDCBA
The above configuration corresponds to 67108863 and will hide all drives. If
you only want to hide the drives: A, C, D, E, F, H and T you would do this:
00000010000000000010111101
ZYXWVUTSRQPONMLKJIHGFEDCBA
This would be 524477 in decimal number and hide the drives A, C, D, E, F, H
and T. This is the value that you type in as the NoDrives Value in the
policy template.
If you want to edit the system.adm template, remember that you have to edit
the .adm file on multiple places:
POLICY !!NoDrives
POLICY !!NoViewOnDrive
...and don't forget to edit the corresponding value in the [strings]
section.
Regards,
/Jimmy
------------------------------------------------
Jimmy Andersson, Principal Advisor - Q Advice AB
Microsoft MVP - Directory Services & Security
--------------- www.qadvice.com ----------------
________________________________
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of mike kline
Sent: Friday, December 23, 2005 4:46 PM
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] Adding drives to restrict drives policy
You are right about the system.adm file
take a look at
http://support.microsoft.com/kb/q231289/
<http://support.microsoft.com/kb/q231289/>
Using Group Policy Objects to hide specified drives in My Computer
for Windows 2000
You need to find out the Hexidecimal value for the drives you want
to hide
You can find the hex values here:
http://www.sd61.bc.ca/windows2000/HideDrives.htm
Hope this helps
Mike
On 12/23/05, Matt Johnson <[EMAIL PROTECTED]> wrote:
I would like to restrict more drives than just A, B, C, D
via group
policy. However, I don't want to restrict access to all of
them. I
know that I probably have to modify the system.adm file to
add more
drives. I wish I knew where to go from there. Any help would
be
greatly appreciated.
The drives by the way I want to restrict access to is
A,B,C,D,L.
Thanks in advance.
--
Matt Johnson
[EMAIL PROTECTED]
"Subtle and insubstantial, the expert leaves no trace;
divinely
mysterious, he is inaudible. Thus he is the master of his
enemy's
fate." -Sun Tzu
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
<<winmail.dat>>
