how to prevent access to local drives of server 2008 for remote desktop users.

-
By default remote desktop user can access local drive of server. user can create folder on drive.
user uses unlimited space of storage. For security purpose it is not safe. Using group policy  we create policy to prevent access to local drives.

Follow the below step to prevent access to local drives of server 2008 for remote desktop users.

  • if you created active directory server then you open group policy management console in administrative tools OR open start > Run > gpedit.msc                                                                                                                                                                                                                       
  • under group policy management console create new group policy by right click and select new and create.                                                                                                                                                    
  • after creating policy right click on policy and select edit.                                                                   
  • expand user configuration > policies > administrative templates > windows components > windows explorer > open - prevent access to drives from my computer.                                                  
  • in this open window click on enable then you will select option for hide the drives. There are seven default options for restricting access to drives.


                                          -Restrict A, B, C and D drives only                                                                                                          -Restrict A, B and C drives only                                                                                                                -Restrict A and B drives only                                                                                                                    -Restrict all drives                                                                                                                                      -Restrict C drive only                                                                                                                                -Restrict D drive only                                                                                                                                 -Do not restrict drives

Popular posts from this blog

How to Reset Terminal license on Windows 2008, 2008 R2 and 2012

-
The RD Licensing grace period has expired and the service has not registered with a license server with installed licenses. A RD Licensing server is required for continuous operation. A Remote Desktop Session Host server can operate without a license server for 120 days after initial start up. The official solution is to Activate the RDS/TS CAL License server and point the Server to License server with User/Device License and will be resolve the problem, but if you want to reset the timer and again avail the 120 days grace time here is the solution: Solution: 1) First open the registry editor with "regedit" command in command prompt. 2)open the registry key from below path HKEY_LOCAL_MACHINE \ SYSTEM \ CurrentControlSet \ Control \ Terminal Server \ RCM \ GracePeriod 3)From GracePeriod delete the key " REG_BINARY".don't delete default registry. 4)then Restart the computer and check the grace period with "tlsbln" command from command
Read more

How to remove a static IP configuration for an absent network adapter or uninstall hidden network adapter

-
Image
In a scenario where you have physically removed hardware from a machine you can no longer see it in device manager.  This does not mean that it is gone.  Evidence of that is, if for example you had a network card that had a Static IP address set and you remove the card and add a new one then try to set the IP address to the same as the old NIC you will get an error message. The error might look something like “The IP address 192.168.30.100 you have entered for this network adapter is already assigned to another adapter (Microsoft Virtual machine Bus Network Adapter #3) which is no longer present in the computer.  If the same address is assigned to both adapters and they both become active, only one of them will use this address.  This may result in incorrect system configuration”.  In Windows Server 2008 R2 and Windows 7 it actually gives you an opportunity to “remove the static IP configuration for the absent adapter”. If you say Yes, this will eliminate the IP conflict problem but
Read more