samba - Aug 2018 - Fwd: Restrict local Storage use and Restrict web Access via any Browser via Group Policy on Windows Desktops

Hi ,


Need to see if it is possible to do

  * Restrict local Storage use - Means how to restrict via group policy
    so that logon user in Samba AD will not be able to save any files on
    local storage of C: of D: drives . He can save on mapped Drive (
     From Samba File Server ) .
  * Restrict web Access via any Browser via Group Policy


We have used samba-4.8.3 and windows version is win 7 , win 8 and window 
10 .


We have tested "web policy " on win2k and found working but same
policy
is not working on other mentioned versions.

Require help in getting some pointers to see if this is possible via 
Group Policy .


TIA

-- 




Warm Regards

Biswajit Banerjee


<mailto:biswajit at tetrain.com>

> Hi ,
> 
> 
> Need to see if it is possible to do
> 
>   * Restrict local Storage use - Means how to restrict via group policy
>     so that logon user in Samba AD will not be able to save any files on
>     local storage of C: of D: drives . He can save on mapped Drive (
>      From Samba File Server ) .
>   * Restrict web Access via any Browser via Group Policy
> 
> 
> We have used samba-4.8.3 and windows version is win 7 , win 8 and window
> 10 .
> 
> 
> We have tested "web policy " on win2k and found working but same
policy
> is not working on other mentioned versions.
> 
> Require help in getting some pointers to see if this is possible via
> Group Policy .
> 
You can hide the C: & D: drives with group policy:

User Configuration | Policies | Administrative Templates | Windows Components |
File Explorer |
Hide These specified drives in My Computer.    

By default you can select A & B, C only, D only, A B & C, A B C and D or
all drives.
(You can edit the template file to be able to specify just C: and D: - see here:
https://support.microsoft.com/en-gb/help/231289/using-group-policy-objects-to-hide-specified-drives
)

However, this won't prevent the user saving files to these drives by
specifying the path explicitly, it just hides them in File Explorer.

To prevent access to these drives, then the "Prevent Access to drives from
My Computer" policy (in the same branch as the one above)
may be used as well.

To restrict web access, a web search will provide some answers, such as: 
https://www.gypthecat.com/how-to-block-internet-access-with-group-policy

HTH,

Roy Eastwood

Thanks Roy .. We could restrict the drive access by group policy .

The method suggested for web access has completely blocking mechanism , 
Can you suggest where we have resticted access to web site by any 
browser on the windows PC .

TIA

Biswajit


On Saturday 04 August 2018 05:32 PM, Roy Eastwood via samba
wrote:
>> Hi ,
>>
>>
>> Need to see if it is possible to do
>>
>>    * Restrict local Storage use - Means how to restrict via group
policy
>>      so that logon user in Samba AD will not be able to save any files
on
>>      local storage of C: of D: drives . He can save on mapped Drive (
>>       From Samba File Server ) .
>>    * Restrict web Access via any Browser via Group Policy
>>
>>
>> We have used samba-4.8.3 and windows version is win 7 , win 8 and
window
>> 10 .
>>
>>
>> We have tested "web policy " on win2k and found working but
same policy
>> is not working on other mentioned versions.
>>
>> Require help in getting some pointers to see if this is possible via
>> Group Policy .
>>
> You can hide the C: & D: drives with group policy:
>
> User Configuration | Policies | Administrative Templates | Windows
Components | File Explorer |
> Hide These specified drives in My Computer.
>
> By default you can select A & B, C only, D only, A B & C, A B C and
D or all drives.
> (You can edit the template file to be able to specify just C: and D: - see
here:
>
https://support.microsoft.com/en-gb/help/231289/using-group-policy-objects-to-hide-specified-drives
)
>
> However, this won't prevent the user saving files to these drives by
specifying the path explicitly, it just hides them in File Explorer.
>
> To prevent access to these drives, then the "Prevent Access to drives
from My Computer" policy (in the same branch as the one above)
> may be used as well.
>
> To restrict web access, a web search will provide some answers, such as:
> https://www.gypthecat.com/how-to-block-internet-access-with-group-policy
>
> HTH,
>
> Roy Eastwood
>
>