TS Hide Server's physical Drives (C drive)

Setup: Windows 2008 64-bit SP2 running TS as a virtual machine (Hyper V).

Everything is working great but I'm looking for a way to hide/restrict the
local server's C and D drive. For example, we have a remote user login via
our URL, launches their app, and then they need to save the file locally to
their machine (not the server). When they save the file, they see the local
servers' C and D drive along with their mapped drives on their physical box.
I want to hide/restrict the end users from seeing the server's C and D
drive. They should only be able to save files to their local physical
machine, not the server.

Any help would be appreciated.

 

Dan wrote:<!--coloro:blue--><span style="color:blue <!--/coloro-->
> Setup: Windows 2008 64-bit SP2 running TS as a virtual machine (Hyper V).
>
> Everything is working great but I'm looking for a way to hide/restrict
> the local server's C and D drive. For example, we have a remote user
> login via our URL, launches their app, and then they need to save the
> file locally to their machine (not the server). When they save the
> file, they see the local servers' C and D drive along with their mapped
> drives on their physical box. I want to hide/restrict the end users from
> seeing the server's C and D drive. They should only be able to save
> files to their local physical machine, not the server.
>
> Any help would be appreciated.<!--colorc--><!--/colorc-->
You can do this by configuring the RDP connection on the server... Also,
have you tried just changing the security settings for the drives in
question?

--

Regards,
Hank Arnold
Microsoft MVP
Windows Server - Directory Services

 

I'm not sure what you are referring to on the RDP connection on the server.
Can you tell me where these settings are and what to look for? I could try
the security settings but I rather not do that.

"Hank Arnold" <rasilon@aol.com> wrote in message
news:uB5NTiKIKHA.1988@TK2MSFTNGP03.phx.gbl...<!--coloro:blue--><span style="color:blue <!--/coloro-->
> Dan wrote:<!--coloro:green--><span style="color:green <!--/coloro-->
>> Setup: Windows 2008 64-bit SP2 running TS as a virtual machine (Hyper V).
>>
>> Everything is working great but I'm looking for a way to hide/restrict
>> the local server's C and D drive. For example, we have a remote user
>> login via our URL, launches their app, and then they need to save the
>> file locally to their machine (not the server). When they save the file,
>> they see the local servers' C and D drive along with their mapped drives
>> on their physical box. I want to hide/restrict the end users from seeing
>> the server's C and D drive. They should only be able to save files to
>> their local physical machine, not the server.
>>
>> Any help would be appreciated.<!--colorc--><!--/colorc-->
> You can do this by configuring the RDP connection on the server... Also,
> have you tried just changing the security settings for the drives in
> question?
>
> --
>
> Regards,
> Hank Arnold
> Microsoft MVP
> Windows Server - Directory Services
> <!--colorc--><!--/colorc-->

 

Enabling / Disabling redirection of local (on the client) drives is
done with the settings on the rdp connection on the server.
However, hiding the local drives of the *server* is done through a
GPO:

User Configuration - Administrative templates - Windows components -
Windows Explorer
"Hide these specified drives in My Computer"

More info:

231289 - Using Group Policy Objects to hide specified drives


Note that the local drives still might be visible from within some
applications, so you should't use this a s a security feature, it's
just a cosmetic setting.

So as Hank said, you will have to combine this setting with NTFS
permissions to prevent users from saving their files on the server.

_________________________________________________________
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Services
RDS troubleshooting:
___ please respond in newsgroup, NOT by private email ___

"Dan" <news.group@cqlcorp.net> wrote on 19 aug 2009 in
microsoft.public.windows.terminal_services:
<!--coloro:blue--><span style="color:blue <!--/coloro-->
> I'm not sure what you are referring to on the RDP connection on
> the server. Can you tell me where these settings are and what to
> look for? I could try the security settings but I rather not do
> that.
>
> "Hank Arnold" <rasilon@aol.com> wrote in message
> news:uB5NTiKIKHA.1988@TK2MSFTNGP03.phx.gbl...<!--coloro:green--><span style="color:green <!--/coloro-->
>> Dan wrote:<!--coloro:darkred--><span style="color:darkred <!--/coloro-->
>>> Setup: Windows 2008 64-bit SP2 running TS as a virtual machine
>>> (Hyper V).
>>>
>>> Everything is working great but I'm looking for a way to
>>> hide/restrict the local server's C and D drive. For example,
>>> we have a remote user login via our URL, launches their app,
>>> and then they need to save the file locally to their machine
>>> (not the server). When they save the file, they see the local
>>> servers' C and D drive along with their mapped drives on their
>>> physical box. I want to hide/restrict the end users from
>>> seeing the server's C and D drive. They should only be able
>>> to save files to their local physical machine, not the server.
>>>
>>> Any help would be appreciated.<!--colorc--><!--/colorc-->
>> You can do this by configuring the RDP connection on the
>> server... Also, have you tried just changing the security
>> settings for the drives in question?
>>
>> --
>>
>> Regards,
>> Hank Arnold
>> Microsoft MVP
>> Windows Server - Directory Services
>> <!--colorc--><!--/colorc--><!--colorc--><!--/colorc-->