General discussion

Locked

Denied Access

By YabarIT ·
Recently I was assigned to manage a NT 4.0 Server, which has 3 clients two running Windows NT Work Station, and one Windows 2000 Professional. The client machines are mostly use to check e-mails and I was task to denied users from having access to the floppy drives and CD ROM Drives. I group the users that need to be denied access. I went to RegEdit to make the changes but can’t find where to assign those commands. It’s been almost 3 years since I worked with NT Server, I remember doing the same task years ago but don’t remember how I did it. Any help is greatly appreciated.


Thanks,

Willi

This conversation is currently closed to new comments.

2 total posts (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Comments

Collapse -

Denied Access

by Joseph Moore In reply to Denied Access

I am stealing the following writeups from is-it-true.org

"This entry restricts access to floppy disk drives to the user currently logged on to the computer. In this mode, floppy disks are allocated to the user as part of the interactive logon process and are freed for general use or for reallocation only when no one is logged on. This parameter satisfies the C2 security requirement that removable media must be securable. Without this restriction, the contents of the floppy disks would be available to all domain administrators remotely.
Hive: HKEY_LOCAL_MACHINE
Key: SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
Name: AllocateFloppies
Type: REG_DWORD
Value: 1 restrict to user logged onto console."

Collapse -

Denied Access

by Joseph Moore In reply to Denied Access

And:

"This entry restricts access to the CDs in the CD-ROM drives to the user currently logged on to the computer. In this mode, CDs are allocated to the user as part of the interactive logon process and are freed for general use or for reallocation only when that user logs off. This parameter satisfies part of the C2 security requirement that removable media must be securable. If this value entry is not added, the contents of the CDs in the drives will be available to all domain administrators remotely.
Hive: HKEY_LOCAL_MACHINE
Key: SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
Name: AllocateCDRoms
Type: REG_DWORD
Value: 1 restrict to user logged onto console."


hope this helps

Back to Windows Forum
2 total posts (Page 1 of 1)  

Related Discussions

Related Forums