Win2k Server: How would I restrict access to a drive?

[aceO07]

I'm setting up Terminal Services on Win2k Server. I'm in the processing of setting up security and would like to secure access to the C: drive.

Is there way making sure the user can't get to the C: drive, but still have the initial program run off the C: drive? Their extra files will be on the D: drive, but their program is running from the C:. They do not start the program, it is automatic.

Does this make sense?

EDIT: Nevermind, I found it. Group policies.

 

[spyordie007]

You also might want to consider restricting the NTFS privilages so that they cannot browse the drive where they should not be (and cannot write to system, etc. folders).

 

[aceO07]

Originally posted by: spyordie007
You also might want to consider restricting the NTFS privilages so that they cannot browse the drive where they should not be (and cannot write to system, etc. folders).

How permissions do I set so that they cannot browse? I need to make sure that the program they're set to run will be able to access all itss component, which are on the C: drive. Their data is on the D: drive.

 

[spyordie007]

I would just ensure that on the root directory of the "C" drive the only privilage they have is read (so they cant write to it); leave the privilages default on the "Program Files" and "Windows" directories. Than take a look at your other directories on the "C" drive and pick and choose what they need access to.

No point in giving them access to more than they need.