General discussion

Locked

Lockdown Setting

By htnguyen0505 ·
How do we disable accessing Floppy & Cd-ROM drives in Windows 2000 Professional?

This conversation is currently closed to new comments.

7 total posts (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Comments

Collapse -

Lockdown Setting

by Joseph Moore In reply to Lockdown Setting

I know that NT had a registry tweak that could let you can "turn off" individual drive letters, making them invisible. I don't know if it works in 2000, but it could be worth a shot.

The key is:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

Add NoDrives as a REG_DWORD.

Add these decimal number to hide the drive(s): A: 1, B: 2, C: 4, 8, E: 16, F: 32, G: 64, H: 128, I: 256, J: 512, K: 1024, L: 2048, M: 4096, N: 8192, O: 16384, P: 32768, Q: 65536, R: 131072, S: 262144, T: 524288, U: 1048576, V: 2097152, W: 4194304, X: 8388608, Y: 16777216, Z: 33554432, ALL: 67108863

Hope this helps.

Collapse -

Lockdown Setting

by htnguyen0505 In reply to Lockdown Setting

The question was auto-closed by TechRepublic

Collapse -

Lockdown Setting

by mebudman In reply to Lockdown Setting

Goto Administrative Tools->Local Security Policy->Computer settings or user settings then apply them wisely. You could lock out people you want to have access to these devices.

Collapse -

Lockdown Setting

by htnguyen0505 In reply to Lockdown Setting

The question was auto-closed by TechRepublic

Collapse -

Lockdown Setting

by LordInfidel In reply to Lockdown Setting

This can be done using the following method:

**Note this affects all users logging into the machine, including admins and regardless of domain/local account. (unless you are using active directory)

Go to start/run type in mmc press run.

A blank mmc opens up. Go to Console/Add remove snap in. Go Add. Scroll down to Group Policy. Press Add.

The Group Policy object should be Local Computer. If you are using active directory this can be done a little more elegantly, but I am assuming that you are not using AD.

Press finish.

Next the local computer policy should show up in the console.

Navigate to User config/admin templates/windows components/Windows Explorer.

You want to enable 2 keys. Hide these specified drivesand prevent access to drives.

When you enable these 2 you will see a drop down box asking which drives to apply this to.

You may need to set your cd rom to drive b instead of whatever letter it currently is, since there is no hide a and d option. You will understand when you see it.

Next, And IMPORTANT, Save the console!!!!!
Console/save as/ choose a location that only you know anout and then set ntfs permissions on that location so that admins can only access.

You can set authormodes but only if you are using AD. The author modes in local mean very little.

Enjoy and good luck

Collapse -

Lockdown Setting

by htnguyen0505 In reply to Lockdown Setting

The question was auto-closed by TechRepublic

Collapse -

Lockdown Setting

by htnguyen0505 In reply to Lockdown Setting

This question was auto closed due to inactivity

Back to Windows Forum
7 total posts (Page 1 of 1)  

Related Discussions

Related Forums