How to Hide Drives using Group Policy in Windows Server 2012 R2

How to Hide Drives using Group Policy in Windows Server 2012 R2

How to hide drives using Group Policies is very important requirement coming from many Organizations who wants their environment to be more secured. In older posts, we talked about the steps of disabling USB drive using Group policy in Windows Server 2012, how to deploy software using Group policy, how to restrict software using GPO, etc. In this post, we’ll run you through the step by step guide to hide drives using Group policy in Windows Server 2012 R2.

Steps to Hide Drives using Group Policy

1. In the below screen shot, you can see drives A; (Floppy Disk), C: & E: (Hard Drives), D: (DVD Drive) is visible. In this practical, we’ll show you step by step guide to hide C: drive of this server.

How to Hide Drives using Group Policy in Windows Server 2012 R2 (1)

2. We are assuming a scenario in which, we are hiding C: drive for all the users that are part of the Sales OU. To achieve the desired results, we have created an OU (how to create OU in Active Directory) and created Users in the OU (how to create users).

How to Hide Drives using Group Policy in Windows Server 2012 R2 (3)

 

3. To create a GPO, open Group Policy Management console by either typing “gpmc.msc” in the run or click on start, click on down arrow and select Group Policy Management console option. Expand domain name i.e. itingredients.com in this case. Right click on OU Sales and select “Create a GPO in this domain, and Link it here”.

How to Hide Drives using Group Policy in Windows Server 2012 R2 (4)

4. Type the name of the new blank GPO template. For this practical we’ll give the name as HideDrive.

How to Hide Drives using Group Policy in Windows Server 2012 R2 (5)

5. Once the blank GPO template is created. Right click on the HideDrive GPO and click on Edit to define the settings to hide drives using Group Policy.

How to Hide Drives using Group Policy in Windows Server 2012 R2 (6)

6. Group Policy management editor window would be opened. As this is User policy therefore on the left hand side frame, expand “User Configuration”, expand Policies, Administrative Templates Policy, Windows Components and select File Explorer. In the right hand side frame, double click on the “Hide these specified drives in My Computer”.

How to Hide Drives using Group Policy in Windows Server 2012 R2 (7)

7. In the “Hide these specified drives in My Computer” window. Select Enabled to hide the drives using Group Policy. Under Options select the drive that you want to hide. For this practical, we’ll select C drive only. Click on Apply and then click on Ok.

How to Hide Drives using Group Policy in Windows Server 2012 R2 (8)

8. Once the policy is defined and enabled, ensure you check it and confirm that it shows “Enabled” in the state.

How to Hide Drives using Group Policy in Windows Server 2012 R2 (10)

9. Go to any of the client computers and run the command “gpupdate /force” to force the group policy. Else you can logoff and login the user back to the computer, it would also refresh the Group Policy.

10. Now open “My PC” (My Computer) to check if C: drive is policy applied successfully or not. If C: drive is hidden then it confirms that our Group Policy is applied successfully. This policy would work for all the users that we created in Sales OU because we deployed this Group policy to Sales OU.

How to Hide Drives using Group Policy in Windows Server 2012 R2 (11)

 

Please don’t forget to share your experience if you are using similar kind of policies in your Organization or if you are facing any issues while deploying these kind of policies.

 

active-directory-group-policy-2012-lab
Share this post:

4 thoughts on “How to Hide Drives using Group Policy in Windows Server 2012 R2

  • August 26, 2016 at 7:49 pm
    Permalink

    Did this exact thing, and added the Prevent Access rule as well. For some reason it is not being applied at all. I am still able to go into the drive as the restricted user and view all contents. I have this policy set to filter to a single user, and that user is in an OU by itself with the policy applied to it. I also have the policy applied to another OU that the server 2012 R2 system I am trying to lock down resides in.

    Any suggestions?

    Reply
    • August 26, 2016 at 9:51 pm
      Permalink

      Nevermind, looks like it was a replication issue. I do have a followup question though. The purpose of this is to create a terminal services server that hosts a file share link without displaying the terminal services server’s drives as well. So I want the users to be able to see their own drive, and the target fileshare, but not the C: on the TS server. The only way I can think to do this is to have the policy applied only to the computer, but its a user policy, so I’m not sure this will work. Can I apply this to an OU with the target machine in it, so that anyone who logs into that machine can’t see the drives, but they can if they log into any other machine?

      Reply
  • November 27, 2016 at 7:19 am
    Permalink

    Thanks for putting all these steps and make this article. It really helped me in hiding drives using Group Policy. Appreciate your efforts.

    Reply
  • November 29, 2016 at 11:30 pm
    Permalink

    Thanks for nice article. It really helped me in hiding drives using Group Policy. Can I also hide drives on my home Computer that is not part of the Domain?

    Reply

Leave a Reply

Your email address will not be published. Required fields are marked *