|
Introduction This howto will show you how you can hide local drives in a Terminal Server environment or on workstations which are members of the domain. In the other howto I wrote hide local drives you read that you had to open the system.adm file and configure that to add more driveletters. Well that is history. Microsoft changed the way grouppolicies are buildup. From adm to admx and adml files. Also the location is changed to %systemroot%\windows\policydefinitions (locally). What is different In the adm file you had the policy section and the [string] section that is now split into the policy section, the admx file and the [string] section the adml file. If you create a new part in the admx file and forget the add it also in the adml file you will get errors like you got while not adding it to the [string] section in the adm file. What do we useTo calculate the drives I want to hide I used Dave’s Drive Calculator.
Download Daves Drive Calculator What are we gonna hideIn this howto we are going to hide the drives A,C and O drive. If you open dave’s drive calculator and fill in the drives and press calculate, you will see you get the number 16389 
Central Storage Our test server is member of the datacrash.local domain. So first we create a central store (see KB929841) for the policies in \\dc01\sysvol\fqdn\policies and copy the admx and adml files. Edit the policy Now we can start editing the WindowsExplorer.admx and! WindowsExplorer.adml files. you can either use notepad.exe or notepad++ or another editor. we added the following section in NoDrives and NoViewOnDrives <item displayName="$(string.ACOOnly)">
<value>
<decimal value="16389" />
</value>
</item> Now it looks like this: <item displayName="$(string.ABOnly)">
<value>
<decimal value="3" />
</value>
</item>
<item displayName="$(string.COnly)">
<value>
<decimal value="4" />
</value>
</item>
<item displayName="$(string.DOnly)">
<value>
<decimal value="8" />
</value>
</item>
<item displayName="$(string.ABConly)">
<value>
<decimal value="7" />
</value>
</item>
<item displayName="$(string.ABCDOnly)">
<value>
<decimal value="15" />
</value>
</item>
<item displayName="$(string.ACOOnly)">
<value>
<decimal value="16389" />
</value>
</item>
<item displayName="$(string.ALLDrives)">
<value>
<decimal value="67108863" />
</value>
</item> Now that we have done the admx file we need to open the adml file. In the Stringtable you need to add the line <string id="ACOOnly">Restrict A, C and O drives only</string> Now it looks like this: <stringTable>
<string id="ABCDOnly">Restrict A, B, C and D drives only</string>
<string id="ABConly">Restrict A, B and C drives only</string>
<string id="ABOnly">Restrict A and B drives only</string>
<string id="ACOOnly">Restrict A, C and O drives only</string>
<string id="ALLDrives">Restrict all drives</string>
<string id="ClassicShell">Turn on Classic Shell</string> Now your ready to hide the A, C and O drive on for instance the terminal server or citrix server. Good luck in editting Make sure you create copies first before altering the WindowsExplorer.admx and adml file!!
|
