Drive restriction and application error
hi
we have set group policy configuration hide , restrict drives on windows server 2008 r2 terminal server. is:
windows components/windows explorer
- hide these specified drives in computer - restrict a, b , c drives only
- prevent access drives computer - restrict c drive only
the issue have have application when runs, launches external application, because c drive restricted cannot found.
any thoughts around this?
i don't know if issue entirely due gpo settings, have same lockdowns (more strict actually, hiding , preventing access drives) if make shortcut notepad example, ts users can still launch it. these settings more cosmetics lockdowns in explorer - if read gpo explanations state users still technically gain access c
have tried @ user access permissions particular app see if have effective rights? app require them write c drive or strictly read?
i suggest best practice keep ts applications on different volume c, it's more secure , easier administer when comes segregating/isolating permissions.
Windows Server > Remote Desktop Services (Terminal Services)
Comments
Post a Comment