Restricting access to the C drive
Is there any way I can restrict access to the C drive for one particular group? I've tried setting deny permissions on each folder in the root of the C drive for the group in question, however this doesn't work for folders such as C:Windows because their permissions cannot be edited even by an administrator.
The Policy Editor approach doesn't help because users are still able to access the C drive if they connect to the server via SFTP (OpenSSH for Windows).
windows permissions windows-server-2008-r2
asked Oct 3 '16 at 14:24
user928112user928112
61
|
show 4 more comments
Is there any way I can restrict access to the C drive for one particular group? I've tried setting deny permissions on each folder in the root of the C drive for the group in question, however this doesn't work for folders such as C:Windows because their permissions cannot be edited even by an administrator.
The Policy Editor approach doesn't help because users are still able to access the C drive if they connect to the server via SFTP (OpenSSH for Windows).
windows permissions windows-server-2008-r2
asked Oct 3 '16 at 14:24
user928112user928112
61
Have you tried using a Group Policy?
– Mr. Hargrove
Oct 3 '16 at 14:24
@Mr.Hargrove Yeah that's what I'm trying to do. I've created a group and tried to set DENY permissions on each folder in the C drive, however I can't set permissions on folders such as C:Windows because I get an error similar to this: 3.bp.blogspot.com/-s96iRRScuZA/Vqn1mbsTckI/AAAAAAAAA4A/…
– user928112
Oct 3 '16 at 14:38
are you logged on as the Admin for your domain?
– Mr. Hargrove
Oct 3 '16 at 14:39
@Mr.Hargrove Yes, I'm logged in as Admin.
– user928112
Oct 3 '16 at 14:54
1
@Mr.Hargrove That is the policy editor approach I was referring to in my original post. This doesn't help me because users can still navigate through the C drive if they log in via SFTP.
– user928112
Oct 3 '16 at 15:08
|
show 4 more comments
Is there any way I can restrict access to the C drive for one particular group? I've tried setting deny permissions on each folder in the root of the C drive for the group in question, however this doesn't work for folders such as C:Windows because their permissions cannot be edited even by an administrator.
The Policy Editor approach doesn't help because users are still able to access the C drive if they connect to the server via SFTP (OpenSSH for Windows).
windows permissions windows-server-2008-r2
asked Oct 3 '16 at 14:24
user928112user928112
61
Is there any way I can restrict access to the C drive for one particular group? I've tried setting deny permissions on each folder in the root of the C drive for the group in question, however this doesn't work for folders such as C:Windows because their permissions cannot be edited even by an administrator.
The Policy Editor approach doesn't help because users are still able to access the C drive if they connect to the server via SFTP (OpenSSH for Windows).
windows permissions windows-server-2008-r2
windows permissions windows-server-2008-r2
asked Oct 3 '16 at 14:24
user928112user928112
61
asked Oct 3 '16 at 14:24
user928112user928112
61
asked Oct 3 '16 at 14:24
user928112user928112
61
asked Oct 3 '16 at 14:24
user928112user928112
61
asked Oct 3 '16 at 14:24
user928112user928112
61
61
Have you tried using a Group Policy?
– Mr. Hargrove
Oct 3 '16 at 14:24
@Mr.Hargrove Yeah that's what I'm trying to do. I've created a group and tried to set DENY permissions on each folder in the C drive, however I can't set permissions on folders such as C:Windows because I get an error similar to this: 3.bp.blogspot.com/-s96iRRScuZA/Vqn1mbsTckI/AAAAAAAAA4A/…
– user928112
Oct 3 '16 at 14:38
are you logged on as the Admin for your domain?
– Mr. Hargrove
Oct 3 '16 at 14:39
@Mr.Hargrove Yes, I'm logged in as Admin.
– user928112
Oct 3 '16 at 14:54
1
@Mr.Hargrove That is the policy editor approach I was referring to in my original post. This doesn't help me because users can still navigate through the C drive if they log in via SFTP.
– user928112
Oct 3 '16 at 15:08
|
show 4 more comments
Have you tried using a Group Policy?
– Mr. Hargrove
Oct 3 '16 at 14:24
@Mr.Hargrove Yeah that's what I'm trying to do. I've created a group and tried to set DENY permissions on each folder in the C drive, however I can't set permissions on folders such as C:Windows because I get an error similar to this: 3.bp.blogspot.com/-s96iRRScuZA/Vqn1mbsTckI/AAAAAAAAA4A/…
– user928112
Oct 3 '16 at 14:38
are you logged on as the Admin for your domain?
– Mr. Hargrove
Oct 3 '16 at 14:39
@Mr.Hargrove Yes, I'm logged in as Admin.
– user928112
Oct 3 '16 at 14:54
1
@Mr.Hargrove That is the policy editor approach I was referring to in my original post. This doesn't help me because users can still navigate through the C drive if they log in via SFTP.
– user928112
Oct 3 '16 at 15:08
Have you tried using a Group Policy?
– Mr. Hargrove
Oct 3 '16 at 14:24
Have you tried using a Group Policy?
– Mr. Hargrove
Oct 3 '16 at 14:24
@Mr.Hargrove Yeah that's what I'm trying to do. I've created a group and tried to set DENY permissions on each folder in the C drive, however I can't set permissions on folders such as C:Windows because I get an error similar to this: 3.bp.blogspot.com/-s96iRRScuZA/Vqn1mbsTckI/AAAAAAAAA4A/…
– user928112
Oct 3 '16 at 14:38
@Mr.Hargrove Yeah that's what I'm trying to do. I've created a group and tried to set DENY permissions on each folder in the C drive, however I can't set permissions on folders such as C:Windows because I get an error similar to this: 3.bp.blogspot.com/-s96iRRScuZA/Vqn1mbsTckI/AAAAAAAAA4A/…
– user928112
Oct 3 '16 at 14:38
are you logged on as the Admin for your domain?
– Mr. Hargrove
Oct 3 '16 at 14:39
are you logged on as the Admin for your domain?
– Mr. Hargrove
Oct 3 '16 at 14:39
@Mr.Hargrove Yes, I'm logged in as Admin.
– user928112
Oct 3 '16 at 14:54
@Mr.Hargrove Yes, I'm logged in as Admin.
– user928112
Oct 3 '16 at 14:54
1
1
@Mr.Hargrove That is the policy editor approach I was referring to in my original post. This doesn't help me because users can still navigate through the C drive if they log in via SFTP.
– user928112
Oct 3 '16 at 15:08
@Mr.Hargrove That is the policy editor approach I was referring to in my original post. This doesn't help me because users can still navigate through the C drive if they log in via SFTP.
– user928112
Oct 3 '16 at 15:08
|
show 4 more comments
0
active
oldest
votes
Your Answer
StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "3"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});
function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});
}
});
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fsuperuser.com%2fquestions%2f1131003%2frestricting-access-to-the-c-drive%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
0
active
oldest
votes
0
active
oldest
votes
active
oldest
votes
active
oldest
votes
Thanks for contributing an answer to Super User!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fsuperuser.com%2fquestions%2f1131003%2frestricting-access-to-the-c-drive%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Have you tried using a Group Policy?
– Mr. Hargrove
Oct 3 '16 at 14:24
@Mr.Hargrove Yeah that's what I'm trying to do. I've created a group and tried to set DENY permissions on each folder in the C drive, however I can't set permissions on folders such as C:Windows because I get an error similar to this: 3.bp.blogspot.com/-s96iRRScuZA/Vqn1mbsTckI/AAAAAAAAA4A/…
– user928112
Oct 3 '16 at 14:38
are you logged on as the Admin for your domain?
– Mr. Hargrove
Oct 3 '16 at 14:39
@Mr.Hargrove Yes, I'm logged in as Admin.
– user928112
Oct 3 '16 at 14:54
1
@Mr.Hargrove That is the policy editor approach I was referring to in my original post. This doesn't help me because users can still navigate through the C drive if they log in via SFTP.
– user928112
Oct 3 '16 at 15:08