GPO - restrics access to disk c:\ for users. Allow access for domain administratos to network \\pcname\c$

Question

What is the proper way to restrict access to system disk to users? But at the same time:

• Allow the operation system, especially drivers, and already installed software work properly.
• Allow domain administrators to have access to user's system disks by "\pcname\c$"

Answer 1

Hello,

Thank you for posting here.

According to your description, as for the GPO to restrict users to access disk C:\, we could have a check whether this GPO is what we want.

User Configuration > Administrative Templates > Windows Components > Windows Explorer > Prevent access to drives from My Computer. It is set to "Enabled" with the option "Restrict C drive only".

This similar case is also discussed on our TechNet forum. Below is the link:
https://social.technet.microsoft.com/Forums/en-US/f0e747b9-8952-46aa-ac4d-0d9ad341f4c8/how-to-restrict-users-to-access-windows-folder-on-local-drive-quotcquot?forum=winserverGP

For any question, please feel free to contact us.

Best regards,
Hannah Xiong

Answer 2

Hi, I create this GPO, but the users lost access to documents and desktop for example. I want to know if there is a way that the users can have access to C: ( but can't save or create files and folders) But also can continue to use the users normally(all users folders).