Is there any way that we can block access to the My Computer ? . I want this to restrict the access to a removable device.
And how is this related to My Computer? what about command line access?
–
Maxim S. Shatskih
Windows DDK MVP
xxxxx@storagecraft.com
http://www.storagecraft.com
wrote in message news:xxxxx@ntfsd…
> Is there any way that we can block access to the My Computer ? . I want this to restrict the access to a removable device.
>
>
>
…or access via another utility?
Peter
OSR
Ok. Well.Is it possible to hide a drive restrict access to the drive
atleast.
On Sat, Jun 5, 2010 at 1:09 AM, wrote:
> …or access via another utility?
>
> Peter
> OSR
>
>
> —
> NTFSD is sponsored by OSR
>
> For our schedule of debugging and file system seminars
> (including our new fs mini-filter seminar) visit:
> http://www.osr.com/seminars
>
> To unsubscribe, visit the List Server section of OSR Online at
> http://www.osronline.com/page.cfm?name=ListServer
>
–
Prageeth Madhushanka
Sri Lanka
Sure. You could put an ACL on it.
I understand that you can even do it from user mode (see SetKernelObjectSecurity), though I’ve never done it from user-mode myself. Pop a property sheet using EditSecurity (from ACLUI, I’ve done THAT) and you’re all set.
How’s that?
Peter
OSR
Not clear how this is going to help.
Some years ago, I was at a library, where, to prevent access to removable
devices, they had installed some program that put them other than in “My
Computer”. When I asked why I couldn’t write files to the device, an IT
type came up, made a couple mystical passes in Explorer, and I had the
devices.
So it is going to depend on what path is used to access the device and
probably a lot of other things. All that blocking access to “My Computer”
will do is block access to that particular item in Explorer, but it is not
clear that it will block access to removable devices.
joe
-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of
xxxxx@gmail.com
Sent: Friday, June 04, 2010 3:16 AM
To: Windows File Systems Devs Interest List
Subject: [ntfsd] Lock My Computer
Is there any way that we can block access to the My Computer ? . I want this
to restrict the access to a removable device.
NTFSD is sponsored by OSR
For our schedule of debugging and file system seminars (including our new fs
mini-filter seminar) visit:
http://www.osr.com/seminars
To unsubscribe, visit the List Server section of OSR Online at
http://www.osronline.com/page.cfm?name=ListServer
–
This message has been scanned for viruses and dangerous content by
MailScanner, and is believed to be clean.
The question is how can denying access to My Computer, or Computer in
Vista/Win7 stop an admin in a command line from accessing the device? From a
PowerShell session I highly doubt an experienced user would even be bothered
with My Computer being denied to them. Is this another security via
obscurity boondoggle coming from a pointy haired boss?
Gary G. Little
H (952) 223-1349
C (952) 454-4629
xxxxx@comcast.net
-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of xxxxx@osr.com
Sent: Saturday, June 05, 2010 2:56 PM
To: Windows File Systems Devs Interest List
Subject: RE:[ntfsd] Lock My Computer
Sure. You could put an ACL on it.
I understand that you can even do it from user mode (see
SetKernelObjectSecurity), though I’ve never done it from user-mode myself.
Pop a property sheet using EditSecurity (from ACLUI, I’ve done THAT) and
you’re all set.
How’s that?
Peter
OSR
NTFSD is sponsored by OSR
For our schedule of debugging and file system seminars (including our new fs
mini-filter seminar) visit:
http://www.osr.com/seminars
To unsubscribe, visit the List Server section of OSR Online at
http://www.osronline.com/page.cfm?name=ListServer
You can restrict access to a drive, The question is from who are you try to
restrict the access ? restricting the access to a boot drive by the system
itself may crash the system.
You should be more specific and try to explain what are you trying to do
here. There are many ways to implement it , but wrong ways can be fatal.
Elad
On Sun, Jun 6, 2010 at 2:13 AM, Gary G. Little wrote:
> The question is how can denying access to My Computer, or Computer in
> Vista/Win7 stop an admin in a command line from accessing the device? From
> a
> PowerShell session I highly doubt an experienced user would even be
> bothered
> with My Computer being denied to them. Is this another security via
> obscurity boondoggle coming from a pointy haired boss?
>
> Gary G. Little
> H (952) 223-1349
> C (952) 454-4629
> xxxxx@comcast.net
>
>
>
> -----Original Message-----
> From: xxxxx@lists.osr.com
> [mailto:xxxxx@lists.osr.com] On Behalf Of xxxxx@osr.com
> Sent: Saturday, June 05, 2010 2:56 PM
> To: Windows File Systems Devs Interest List
> Subject: RE:[ntfsd] Lock My Computer
>
> Sure. You could put an ACL on it.
>
> I understand that you can even do it from user mode (see
> SetKernelObjectSecurity), though I’ve never done it from user-mode myself.
> Pop a property sheet using EditSecurity (from ACLUI, I’ve done THAT) and
> you’re all set.
>
> How’s that?
>
> Peter
> OSR
>
>
> —
> NTFSD is sponsored by OSR
>
> For our schedule of debugging and file system seminars (including our new
> fs
> mini-filter seminar) visit:
> http://www.osr.com/seminars
>
> To unsubscribe, visit the List Server section of OSR Online at
> http://www.osronline.com/page.cfm?name=ListServer
>
>
> —
> NTFSD is sponsored by OSR
>
> For our schedule of debugging and file system seminars
> (including our new fs mini-filter seminar) visit:
> http://www.osr.com/seminars
>
> To unsubscribe, visit the List Server section of OSR Online at
> http://www.osronline.com/page.cfm?name=ListServer
>
I was trying to restrict the access to connected USB devices of a PC by
restricting access to my computer.
But now I found a way to do that with changing the current desktop using
WinLock.
Thanks for your replies.
–
Prageeth Madhushanka
Sri Lanka