Questions

Mapped Network Drive must be hidden, but accessible

+
0 Votes
Locked

Mapped Network Drive must be hidden, but accessible

jaytrain40
I know that hiding a drive on a network uses the "$" sign in the logon script, but when I ran that, I could not access the drive at all (even though it was mapped in the script) by typing in the name of the drive. Is there a way to hide the drive from users, but still be able to access the drive if it is needed?

Any input would be appreciated.
  • +
    0 Votes
    DanLM

    When shares are defined within Samba you can say if it is browsable or not, ie....... does it appear in your network listings. Even if I define something as non browsable, I am still able to map it though if I know the correct network path.

    Ie... The network share is not shown to the client pc, but it is accessible to that client if full path information is known.

    So, in answer to your question. I believe the answer would be in the definition of the network share to be shared(samba, novel), it should be able to be defined there not be viewable.

    If your talking a home network where one computer shares a folder to the rest of the computers on the network, I do not know how to stop that from being seen.

    +
    0 Votes
    w2ktechman

    on the local system, network shares will be flaky at best, and admin shares are unavailable

    IPC$
    ADMIN$
    many companies disable these from a standard install (from an image). If they are not on the host system, admin shares will fail
    type net share at the command prompt to list the shares. these should show. If not, that is your problem

    +
    0 Votes
    jaytrain40

    When I look at Net Share on the system, I get ADMIN$
    C$
    IPC$

    As shares on all systems. I guess I should be a little more specific. I work for a small company where information sharing is crucial. However, much like any company, no one needs to see payroll files except those involved in the payroll decisions. My network administrator had always mapped the drive and everything was fine with all our users (even though they could see payroll as a drive, they could not access the information within it) until we rebuilt the Raid on our File System last night. Of course, in the morning, the file server was not available (I had just turned it on from the rebuild). One of our users was logged on and noticed that she was trying to save to a drive she did not have permission to save to (the payroll drive) and not to the file server. Now, our Vice President wants no one to know the drive is there unless they need to access it. It would be too tedious to run seperate logon scripts for every user and keep track of everything they need for their positions with our company, so my network administrator asked me to figure out a way to hide the drive but still have it accessible to those that do not have the map network drive permissions.

    We use Active Directory on Windows Server 2003 and are a non-profit company, so we don't have Samba or Novell to make things more manageable.

    I appreciate and would continue to appreciate everyone's input and thank you all for your time and knowledge, I hope I can return the favor with what I know. Again, thanks.

    +
    0 Votes
    w2ktechman

    is to create a few groups and do it from the logon script. If the drive gets mapped, it will show up, even if it was an admin share, because it assigns a drive letter to it and maps it.

    If browsing the shares, it will not be seen, but if it is mapped, it will be.

    create a few OU's and assigne people by dept. and setup a login script for which dept. they are assigned to.

    +
    0 Votes
    jaytrain40

    My Network Administartor came up with a work around. He modified the permissions of the drive and while all users still map to and can see that the payroll drive exists, if those users are not in the groups given permission, they cannot even open the drive. Prior to this they could open the drive and even open the files, just could not make any changes or save to that drive. I will keep all posted on our results. Again, thanks for everything!

    +
    0 Votes
    stew.martin

    This setting allows you to control which drives are visible in My Computer and Explorer. It is possible to hide all drives or just selected ones.

    Open your registry and find or create the key below.

    The "NoDrives" value uses a 32-bit word to define local and network drive visibility for each logical drive in the computer. The lower 26 bits of the 32-bit word correspond to drive letters A through Z. Drives are visible when set to 0 and hidden when set to 1.

    If your not happy working in Hex, add these decimal numbers to hide the drive(s):

    A: 1, B: 2, C: 4, 8, E: 16, F: 32, G: 64, H: 128, I: 256, J: 512, K: 1024, L: 2048, M: 4096, N: 8192, O: 16384, P: 32768, Q: 65536, R: 131072, S: 262144, T: 524288, U: 1048576, V: 2097152, W: 4194304, X: 8388608, Y: 16777216, Z: 33554432, ALL: 67108863

    For example to hide drive A and drive D, you would add 1 (A) + 8 (D) which means the value should be set to "9".

    To disable all the drives set the value to "67108863".

    Restart Windows for the change to take effect.

    Settings:
    User Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
    System Key: [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
    Name: NoDrives
    Type: REG_DWORD (DWORD Value)

    +
    0 Votes
    Mehul Bhai

    The OP is 3 Years old.

  • +
    0 Votes
    DanLM

    When shares are defined within Samba you can say if it is browsable or not, ie....... does it appear in your network listings. Even if I define something as non browsable, I am still able to map it though if I know the correct network path.

    Ie... The network share is not shown to the client pc, but it is accessible to that client if full path information is known.

    So, in answer to your question. I believe the answer would be in the definition of the network share to be shared(samba, novel), it should be able to be defined there not be viewable.

    If your talking a home network where one computer shares a folder to the rest of the computers on the network, I do not know how to stop that from being seen.

    +
    0 Votes
    w2ktechman

    on the local system, network shares will be flaky at best, and admin shares are unavailable

    IPC$
    ADMIN$
    many companies disable these from a standard install (from an image). If they are not on the host system, admin shares will fail
    type net share at the command prompt to list the shares. these should show. If not, that is your problem

    +
    0 Votes
    jaytrain40

    When I look at Net Share on the system, I get ADMIN$
    C$
    IPC$

    As shares on all systems. I guess I should be a little more specific. I work for a small company where information sharing is crucial. However, much like any company, no one needs to see payroll files except those involved in the payroll decisions. My network administrator had always mapped the drive and everything was fine with all our users (even though they could see payroll as a drive, they could not access the information within it) until we rebuilt the Raid on our File System last night. Of course, in the morning, the file server was not available (I had just turned it on from the rebuild). One of our users was logged on and noticed that she was trying to save to a drive she did not have permission to save to (the payroll drive) and not to the file server. Now, our Vice President wants no one to know the drive is there unless they need to access it. It would be too tedious to run seperate logon scripts for every user and keep track of everything they need for their positions with our company, so my network administrator asked me to figure out a way to hide the drive but still have it accessible to those that do not have the map network drive permissions.

    We use Active Directory on Windows Server 2003 and are a non-profit company, so we don't have Samba or Novell to make things more manageable.

    I appreciate and would continue to appreciate everyone's input and thank you all for your time and knowledge, I hope I can return the favor with what I know. Again, thanks.

    +
    0 Votes
    w2ktechman

    is to create a few groups and do it from the logon script. If the drive gets mapped, it will show up, even if it was an admin share, because it assigns a drive letter to it and maps it.

    If browsing the shares, it will not be seen, but if it is mapped, it will be.

    create a few OU's and assigne people by dept. and setup a login script for which dept. they are assigned to.

    +
    0 Votes
    jaytrain40

    My Network Administartor came up with a work around. He modified the permissions of the drive and while all users still map to and can see that the payroll drive exists, if those users are not in the groups given permission, they cannot even open the drive. Prior to this they could open the drive and even open the files, just could not make any changes or save to that drive. I will keep all posted on our results. Again, thanks for everything!

    +
    0 Votes
    stew.martin

    This setting allows you to control which drives are visible in My Computer and Explorer. It is possible to hide all drives or just selected ones.

    Open your registry and find or create the key below.

    The "NoDrives" value uses a 32-bit word to define local and network drive visibility for each logical drive in the computer. The lower 26 bits of the 32-bit word correspond to drive letters A through Z. Drives are visible when set to 0 and hidden when set to 1.

    If your not happy working in Hex, add these decimal numbers to hide the drive(s):

    A: 1, B: 2, C: 4, 8, E: 16, F: 32, G: 64, H: 128, I: 256, J: 512, K: 1024, L: 2048, M: 4096, N: 8192, O: 16384, P: 32768, Q: 65536, R: 131072, S: 262144, T: 524288, U: 1048576, V: 2097152, W: 4194304, X: 8388608, Y: 16777216, Z: 33554432, ALL: 67108863

    For example to hide drive A and drive D, you would add 1 (A) + 8 (D) which means the value should be set to "9".

    To disable all the drives set the value to "67108863".

    Restart Windows for the change to take effect.

    Settings:
    User Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
    System Key: [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
    Name: NoDrives
    Type: REG_DWORD (DWORD Value)

    +
    0 Votes
    Mehul Bhai

    The OP is 3 Years old.