RE: How to prevent local user to use floppy and CD

From: Rashmi.K.Y [MSFT] (v-raky_at_microsoft.com)
Date: 04/20/04


Date: Tue, 20 Apr 2004 05:04:07 GMT

Hi,

I understand that you want to restrict the access to floppy drive and CD
drive to locally logged in users.

Please follow these steps and check whether the steps provide the solution
you are looking for:

To disable the CDROM drive, please find the drive letter of the CD Drive.

1. On the Windows XP computer, click on start menu
2. Click on run
3. Type 'gpedit.msc' without the quotes.
4. Navigate to the following path

User Configuration -> Administrative templates -> Windows Explorer

5. On the right hand side, double click the policy named 'Hide these drives
in my computer'
6. Click on enabled.
7. Choose the combination as 'Restrict A and B drives only'
8. Click on OK.

Note: This option hides floppy drive from the system. You can however
access the floppy drive from command prompt.

9. Now double click on 'Prevent Access to drives from my computer' policy.
10. Click on enable.
11. Choose 'Restrict X drive only' where X is the drive letter of the CDROM
drive.
12. Click on OK.
13. Now close the MMC.
14. Click on start -> Run -> type 'gpupdate' without quotes and press enter.

To prevent administrator from being restricted to floppy/CD access, login
as administrator.

Warning If you use Registry Editor incorrectly, you may cause serious
problems that may require you to reinstall your operating system. Microsoft
cannot guarantee that you can solve problems that result from using
Registry Editor incorrectly. Use Registry Editor at your own risk.

Please backup your registry before performing modifications to registry.
The following article helps you to do that.

HOW TO: Back Up, Edit, and Restore the Registry in Windows XP and Windows
Server 2003
http://support.microsoft.com/default.aspx?scid=kb;EN-US;322756

a) Click on start -> Run -> type 'regedit' without quotes.
b) Navigate to the following path:

My
Computer\Hkey_Current_User\Software\Microsoft\Windows\CurrentVersion\Policie
s\Explorer

c) Double click 'NoDrives' REG_DWORD. In value data, change the current
value to zero.
d) Double click 'NoViewOnDrive' REG_DWORD. In value data, change the
current value to zero.
e) Click on OK.
f) Exit registry editor.

Now check if the users are able to access the CD/DVD drive. Also ensure
that the administrator is able to access the drive.

Thank you.

Rashmi

This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
| Content-Class: urn:content-classes:message
| From: "Dejan" <zuki011@yahoo.com>
| Sender: "Dejan" <zuki011@yahoo.com>
| Subject: How to prevent local user to use floppy and CD
| Date: Mon, 19 Apr 2004 03:15:04 -0700
| Lines: 4
| Message-ID: <0de901c425f7$2eea66c0$a301280a@phx.gbl>
| MIME-Version: 1.0
| Content-Type: text/plain;
| charset="iso-8859-1"
| Content-Transfer-Encoding: 7bit
| X-Newsreader: Microsoft CDO for Windows 2000
| Thread-Index: AcQl9y7qOwGCUa3/T0+W+3xLu0fS4g==
| X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4910.0300
| Newsgroups: microsoft.public.windowsxp.security_admin
| Path: cpmsftngxa10.phx.gbl
| Xref: cpmsftngxa10.phx.gbl
microsoft.public.windowsxp.security_admin:121371
| NNTP-Posting-Host: tk2msftngxa11.phx.gbl 10.40.1.163
| X-Tomcat-NG: microsoft.public.windowsxp.security_admin
|
| How to prevent local users(logged on localy on computer
| which is a member of WORKGROUP) to use flopy and CD drive
| and allow administrators to use floppy and CD drive
|
|



Relevant Pages

  • Re: Cant Access System Restore - Disabled by Group Policy
    ... In the right-pane, delete the value "DisableConfig". ... Close Registry Editor ... The only way that I can access the Administrator account is in safe mode...and I log on and I still see System Restore greyed out and saying disabled by group policy. ...
    (microsoft.public.windowsxp.general)
  • Re: registry editor do not open
    ... > When I try to open Registry Editor I get this message: Administrator ... If this policy is enabled and the user tries to start a registry editor, ...
    (microsoft.public.win2000.general)
  • registry editing disabled by administrator
    ... access the registry editor or tweakui under Windows XP. ... editing has been disabled by the administrator" which is ... the same message pops up. ... This problem is only for my main account. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: restrictions on IE
    ... no--i get the message that it has been restricted by the administrator. ... "Jon Kennedy" wrote: ... > registry editor open? ... Prev by Date: ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • RE: renaming Services ???
    ... Load the Registry Editor ... Navigate to the HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services ... Thanks for using Microsoft News Group! ... | Content-Class: urn:content-classes:message ...
    (microsoft.public.windowsxp.security_admin)