Is there a way I can revoke a users from saving on the C: drive?

Well I am trying to revoke users from saving on the C: drive. I would like for them to save their files on a server. Which I have changed their Home directory to the server but this will not keep them from saving on the C: drive. I have even setup Disk Quota that fail. The computer OS is Windows Vista Home Premium.

files fileserver windowsvista users windows harddrive server

asked Mar 13 '11 at 19:18

applegeek
631●38●44●58

edited Mar 14 '11 at 19:44

4 Answers:

oldest newest most voted

My Computer > Right-click C: > properties > security > deny to those users

OR

My Computer > Right-click C: > properties > security > remove everyone except "System" and "Administrators" and "Domain Administrators" (if on a domain)

Also, of course, don't make people Administrators unless you want them to have Administrator access.

answered Mar 13 '11 at 19:22

tsilb
21.0k●65●199●333

edited Mar 13 '11 at 19:23

They are set to standard user. When I edit the security permissions I run into a lot of error applying security.

(Mar 13 '11 at 19:32) applegeek

1	answered Mar 13 '11 at 19:33 applegeek 631●38●44●58 1 Looks like you yourself don't have admin permissions. (Mar 14 '11 at 21:25) HHBones I was on the built in Administrator account. (Mar 14 '11 at 21:58) applegeek

I had to change permission to the user folder on the C: drive

answered Mar 14 '11 at 19:33

applegeek
631●38●44●58

Well you didn't mention you were trying to revoke access to the specific foler, just the drive. Therefore I'm still right; yay me! :)

(Mar 15 '11 at 00:42) tsilb

In my opinion I believe I marked yours as the answers.

(Mar 15 '11 at 08:11) applegeek

True. I'm just sayin', the more accurate the question, the more accurate the answers.

(Mar 15 '11 at 10:45) tsilb

This was answered on air live as well.

if this was on a domain, which home preimum cant be you would have a group policy enabled to have the home driver be the network. however this is really wise as its slows and counterproductive. A full out deny of C: doesn't work as the applications need to write to the %temp% folder which is normaly c:usersusernameappdataroamingtemp.

hacking up the permissions would work but cold lead to what you had above as well with access denied.

adding users to groups and giving those groups read, execute access to the C: drive would work, but not write access. Some tweaking would be involved to get all the quirks worked out as well.

answered Mar 15 '11 at 02:43

jeff
811●5●14

Your answer

toggle preview

community wiki

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

*italic* or __italic__
**bold** or __bold__
link:[text](http://url.com/ "title")
image?![alt text](/path/img.jpg "title")
numbered list: 1. Foo 2. Bar
to add a line break simply add two spaces to where you would like the new line to be.
basic HTML tags are also supported

learn more about Markdown