Group policy - Hide hard-drives in Server 2008

Het kan zijn dat je bij het installeren van een Terminal Server tegen het probleem aanloopt
dat je niet alle drives kan verbergen welke je wilt verbergen.

Het makkelijkste is om in dit geval een nieuwe ADM aan te maken en deze te importeren in
je TerminalServer policy.

Maak met notepad een nieuw bestaand aan en noem deze 'hidedrives.adm', zet onderstaande
config in het tekstbestand

CLASS USER
CATEGORY !!HideDrive
KEYNAME Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

POLICY !!NoDrives
#if version >= 4
SUPPORTED !!SUPPORTED_Win2k
#endif

EXPLAIN !!NoDrives_Help
PART !!NoDrivesDropdown DROPDOWNLIST NOSORT REQUIRED
VALUENAME "NoDrives"
ITEMLIST
NAME !!ABOnly           VALUE NUMERIC 3
NAME !!COnly            VALUE NUMERIC 4
NAME !!DOnly            VALUE NUMERIC 8
NAME !!EOnly VALUE NUMERIC 16
NAME !!FOnly VALUE NUMERIC 32
NAME !!ABConly          VALUE NUMERIC 7
NAME !!ABCDOnly         VALUE NUMERIC 15
NAME !!ABCDEOnly VALUE NUMERIC 31
NAME !!ABCDEFOnly VALUE NUMERIC 63
NAME !!ALLDrives        VALUE NUMERIC 67108863 DEFAULT
; low 26 bits on (1 bit per drive)
NAME !!RestNoDrives     VALUE NUMERIC 0
END ITEMLIST
END PART
END POLICY


END CATEGORY

[strings]
ABOnly="Restrict A and B drives only"
ABConly="Restrict A, B and C drives only"
ABCDOnly="Restrict A, B, C and D drives only"
ABCDEOnly="Restrict A, B, C, D and E drives only"
ABCDEFOnly="Restrict A, B, C, D, E and F drives only"
ALLDrives="Restrict all drives"
COnly="Restrict C drive only"
DOnly="Restrict D drive only"
EOnly="Restrict E drive only"
FOnly="Restrict F drive only"
HideDrive="Hide Drives"
NoDrives="Hide these specified drives in My Computer"
NoDrivesDropdown="Pick one of the following combinations"
NoDrives_Help="Removes the icons representing selected hard drives from 
My Computer and Windows Explorer. Also, the drive letters representing the 
selected drives do not appear in the standard Open dialog box.\n\nTo use 
this setting, select a drive or combination of drives in the drop-down list. 
To display all drives, disable this setting or select the "Do not restrict drives" 
option in the drop-down list.\n\nNote: This setting removes the drive icons. 
Users can still gain access to drive contents by using other methods, such 
as by typing the path to a directory on the drive in the Map Network Drive dialog 
box, in the Run dialog box, or in a command window.\n\nAlso, this setting does 
not prevent users from using programs to access these drives or their contents. 
And, it does not prevent users from using the Disk Management snap-in to view 
and change drive characteristics.\n\nAlso, see the "Prevent access to drives
from My Computer" setting.\n\nNote: It is a requirement for third-party 
applications with Windows 2000 or later certification to adhere to this setting."
RestNoDrives="Do not restrict drives"
SUPPORTED_Win2k="At least Microsoft Windows 2000"

Sla dit bestand vervoglens op in C:\Windows\PolicyDefinitions\

2. Bewerk het GP Object waarin deze policy moet worden toegevoegd
3. Onder de Gebruikersconfiguratie klik je met je rechtermuis op 'Administrative Templates' en op 'Add/Remove Templates'
4. Browse naar C:\Windows\PolicyDefinitions\hidedrives.adm
5. Je vind je policy nu terug onder ->Classic Administrative Templates (ADM) -> Hide Drives
6. Configureer nu hoe je hem wilt hebben, het het tekstbestand kun je je eigen waardes toevoegen, met de
Dave Drive's Calculator (link) kun je de 'numeric value's' bereken.
7. Let er wel op dat de *originele* hide specified drives* niet geconfigureerd is.