Microsoft KB Archive/315191

= Incorrect &quot;Prevent Access to Drives from My Computer&quot; Informational Message =

Article ID: 315191

Article Last Modified on 2/22/2007

-

APPLIES TO


 * Microsoft Windows 2000 Service Pack 1
 * Microsoft Windows 2000 Service Pack 2
 * Microsoft Windows XP Professional

-



This article was previously published under Q315191



SYMPTOMS
There is a documentation error in the Windows 2000 Professional and Windows XP Professional &quot;Prevent access to drives from My Computer&quot; group policy informational message. The informational message for this group policy incorrectly states:

If you enable this setting, users cannot view the contents of the selected drives in My Computer or Windows Explorer. Also, they cannot use the Run dialog box, the Map Network Drive dialog box, or the Dir command to view the directories on these drives.

Although the Group Policy object (GPO) is applied, it is possible to browse the folder structure by clicking the plus sign (+) in the Folders pane of Windows Explorer. As soon as you click a folder name, the preceding informational message about the restriction appears. Lastly, it is still possible to use the dir command from a command prompt (Cmd.exe) against the according drive.



RESOLUTION
To disable the ability to browse from the Folders pane by clicking the plus sign in addition to setting the &quot;Prevent access to drives from My Computer&quot; group policy, also set the &quot;Hide these specified drives in My Computer&quot; for the appropriate drive. For additional information about how to lock down a Windows 2000 Terminal Server session, click the following article number to view the article in the Microsoft Knowledge Base:

278295 How to lock down a Windows Server 2003 or Windows 2000 Terminal Server session

To prevent the use of the dir command by using Cmd.exe, set the folder's NTFS permissions accordingly (a program-independent solution), or do not allow Cmd.exe to run by using the &quot;Disable the command prompt&quot; group policy under Administrative Templates, System.



STATUS
Microsoft has confirmed that this is a problem in the Microsoft products that are listed at the beginning of this article.



MORE INFORMATION
The provided functionality of Windows Explorer is by design. Cmd.exe does not have the ability to check for the &quot;Prevent access to drives from My Computer&quot; group policy setting.

Additional query words: cmd.exe

Keywords: kbdocerr kbenv kbprb KB315191

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.