none
Nascondere unità disco in Windows Server 2008 R2 RRS feed

  • Domanda

  • Ho bisogno di nascondere una selezione non standard di unità disco ad alcuni utenti di Windows Server 2008 R2 (ad esempio, i dischi A, B, C, J e K).

    In passato avevo utilizzato quanto descritto alla pagina http://support.microsoft.com/kb/231289/en-us ma, nonostante dica che soluzione si applica a Windows Server 2008 R2, in Windows Server 2008 R2 i file .adm sono sotituiti dai file .admx che hanno una gestione differente.

    Ho fatto dei test basandomi su quanto descritto alla pagina http://technet.microsoft.com/en-us/library/cc748955(v=ws.10).aspx (che peraltro fa ancora riferimento a Vista) ma, anche dopo aver editato i file .admx, non riesco a usare nessuna combinazione di drive diversa da quelle predefinite.

    Qualcuno mi può indicare una descrizione completa e dettagliata della procedura per nasconedere una selezione non standard di unità disco in Windows server 2008 R2?

    marius

    lunedì 27 febbraio 2012 21:57

Risposte

  • Prova a vedere se questa articolata risposta ti aiuta:

    The Group Policy Management Console on Windows Server 2008 uses ADMX files
    for Administrative Templates. at least for those settings delivered with
    Windows (2008 or Vista).  Modifying the ADM files supplied with the OS by
    Microsoft won't have any affect - see
    http://technet.microsoft.com/en-us/library/cc709647.aspx.  Here's a quote
    from http://technet.microsoft.com/en-us/library/cc748955.aspx (although this
    mentions Vista, it also applies to Server 2008):

    "Group Policy tools will continue to recognize custom ADM files you have in
    your existing environment, but will ignore any ADM file that has been
    superseded by ADMX files: System.adm, Inetres.adm, Conf.adm, Wmplayer.adm,
    and Wuau.adm. Therefore, if you have edited any of the these files to modify
    existing or create new policy settings, the modified or new settings will
    not be read or displayed by the Windows Vista-based Group Policy tools."

    The setting "Hide these specified drives in My Computer" is in the
    WindowsExplorer.ADMX file (see the spreadsheet that can be downloaded from
    http://www.microsoft.com/downloads/details.aspx?familyid=2043B94E-66CD-4B91-9E0F-68363245C495&displaylang=en).

    Modifying the ADMX or ADM files supplied by Microsoft with Windows is not
    exactly recommended.  For one thing, changes you make may get may get
    removed when a new version of the file is installed by a service pack or
    possibly other updates.  This won't affect existing GPOs, just what shows in
    the Group Policy Management Editor.

    The ADMX files are stored in %systemroot%\PolicyDefinitions, but you will
    most likely find that the default permissons means that you can't modify the
    copies there.  If you create a "Central Store" (see
    http://technet.microsoft.com/en-us/library/cc748955.aspx), you can modify
    the contents of the ADMX and ADML files in it.

    After creating the Central Store, you can make the changes you want, for
    example:

    1. in the WindowsExplorer.admx file, in the <policy name="NoDrives" tag
    replicate one of the existing <item tags and change it the way you want.

    Notice the displayName="$(string.xxxx)" entries.  These refer to the
    corresponding strings in the language specific ADML file that is in the
    language specific sub-folder (e.g.
    %systemroot%\sysvol\Domain\Policies\PolicyDefiniti  ons\en-US).

    2. add any strings you reference in the new <item tag into the language
    specific ADML file (e.g. en-US\WindowsExplorer.adml).  The strings
    associated with the NoDrives and NoViewOnDrives policy settings are the
    first ones in the en-US\WindowsExplorer.adml files, so they are easy to
    find.

    I added an entry for "ABCDEonly" (value is 31) using the above steps and it
    appears in the Group Policy Management Editor as expected.

    --
    Bruce Sanderson
    http://members.shaw.ca/bsanders

    It is perfectly useless to know the right answer to the wrong question.


    Edoardo Benussi
    Microsoft MVP - Management Infrastructure
    edo[at]mvps[dot]org

    martedì 28 febbraio 2012 08:26
    Moderatore

Tutte le risposte

  • Prova a vedere se questa articolata risposta ti aiuta:

    The Group Policy Management Console on Windows Server 2008 uses ADMX files
    for Administrative Templates. at least for those settings delivered with
    Windows (2008 or Vista).  Modifying the ADM files supplied with the OS by
    Microsoft won't have any affect - see
    http://technet.microsoft.com/en-us/library/cc709647.aspx.  Here's a quote
    from http://technet.microsoft.com/en-us/library/cc748955.aspx (although this
    mentions Vista, it also applies to Server 2008):

    "Group Policy tools will continue to recognize custom ADM files you have in
    your existing environment, but will ignore any ADM file that has been
    superseded by ADMX files: System.adm, Inetres.adm, Conf.adm, Wmplayer.adm,
    and Wuau.adm. Therefore, if you have edited any of the these files to modify
    existing or create new policy settings, the modified or new settings will
    not be read or displayed by the Windows Vista-based Group Policy tools."

    The setting "Hide these specified drives in My Computer" is in the
    WindowsExplorer.ADMX file (see the spreadsheet that can be downloaded from
    http://www.microsoft.com/downloads/details.aspx?familyid=2043B94E-66CD-4B91-9E0F-68363245C495&displaylang=en).

    Modifying the ADMX or ADM files supplied by Microsoft with Windows is not
    exactly recommended.  For one thing, changes you make may get may get
    removed when a new version of the file is installed by a service pack or
    possibly other updates.  This won't affect existing GPOs, just what shows in
    the Group Policy Management Editor.

    The ADMX files are stored in %systemroot%\PolicyDefinitions, but you will
    most likely find that the default permissons means that you can't modify the
    copies there.  If you create a "Central Store" (see
    http://technet.microsoft.com/en-us/library/cc748955.aspx), you can modify
    the contents of the ADMX and ADML files in it.

    After creating the Central Store, you can make the changes you want, for
    example:

    1. in the WindowsExplorer.admx file, in the <policy name="NoDrives" tag
    replicate one of the existing <item tags and change it the way you want.

    Notice the displayName="$(string.xxxx)" entries.  These refer to the
    corresponding strings in the language specific ADML file that is in the
    language specific sub-folder (e.g.
    %systemroot%\sysvol\Domain\Policies\PolicyDefiniti  ons\en-US).

    2. add any strings you reference in the new <item tag into the language
    specific ADML file (e.g. en-US\WindowsExplorer.adml).  The strings
    associated with the NoDrives and NoViewOnDrives policy settings are the
    first ones in the en-US\WindowsExplorer.adml files, so they are easy to
    find.

    I added an entry for "ABCDEonly" (value is 31) using the above steps and it
    appears in the Group Policy Management Editor as expected.

    --
    Bruce Sanderson
    http://members.shaw.ca/bsanders

    It is perfectly useless to know the right answer to the wrong question.


    Edoardo Benussi
    Microsoft MVP - Management Infrastructure
    edo[at]mvps[dot]org

    martedì 28 febbraio 2012 08:26
    Moderatore
  • Grazie, mi sembra funzioni correttamente.

    marius

    martedì 28 febbraio 2012 20:37
  • grazie a te del feedback, ciao.

    Edoardo Benussi
    Microsoft MVP - Management Infrastructure
    edo[at]mvps[dot]org

    mercoledì 29 febbraio 2012 11:16
    Moderatore