Lock Down PC - File Explorer ONLY?

Question

Hi all,

I want to set up what may be unusual. We are a town with an Active Directory domain. On that domain is a file server holding video files. I would like to build a PC and create a domain user and give them READ ONLY access to this folder on the FS. That's easy, I can handle that part.

However, on the PC this user will be logging into, I would lie to completely lock it down so that they really can't do anything except use file explorer to access the network share. I don't want them to do a damn thing otherwise. They will need to be able to go to the share, copy files from it, use a USB drive, and that's it. Nothing else.

I don't know how to do such things. Domain GPO? Local PC GPO? Either way, there is SO MUCH in there, it seems rather silly to try to go through everything one item at a time. Is there a faster, better method? If not, what should I be looking for and disabling in there?

I'd appreciate any advice. Thanks!

Answer 1

Hello. You could take away File explorer and browse the dir with MSedge. To experiance what it would be like with out File Explorer and to explore the hard drive with MSEDGE do this >

Win+R cmd.exe

taskkill /f /im explorer.exe

start msedge.exe file:///C:/

To Restart File explorer

start explorer.exe

exit

Wow scary. hehe 😊🐈🐈

Answer 2

Good day Chris! I would suggest to post this query to our neighbor forum from the link below as this is best suited in there. They are more oriented on with regards to this type queries/issues and there will be IT Pros and Gurus/System Admins/IT Admins and the likes who has the same deployment or setup in this type of environment and are available that will be able to fulfill your query out there.

https://learn.microsoft.com/en-us/answers/ask

Regards,

Paul R.