Preventing access to a drive in Windows Server

Question

I am using Windows Server 2019 Datacenter. I applied the group policy to hide the drive and restrict users from accessing that drive. However, when I logged in as a user, I am still able to access the drive over Command prompt. Moreover, I am also able to create folders and delete contents of the restricted drive using the CMD, which is a major security risk. Please help me in resolving the issue, as I want to completely inhibit a user from accessing the drive by any means.

Answer 1

Hi,
Welcome to share here!
As you mentioned, the group policy Prevent access to a drive will not completely prevent users to access the drive.

https://learn.microsoft.com/en-us/troubleshoot/windows-client/group-policy/using-group-policy-objects-hide-specified-drives

If it is required in your environment , you need to set the permission on the drives. Remove users from the permission list.
To do this through group policy, you can find the policy under:
Computer Configuration > Policies > Windows Settings >Security Settings and right-click File System> Add File. Let's take an example of C drives:

Fan