Windows Server 2016 GPO File System Security: Restricting Write Access to Root of Drive C:\

Windows Server 2016 GPO File System Security: Restricting Write Access to Root of Drive C:\. By default domain, users have rights to write in the root of Drive C:\, with this GPO we remove this ability.

1. Start Group Policy Management consolă;

2. Choose the GPO object, Right Mouse Button click, și faceți clic Edit;

3. Navigate to Computer Configuration\Policies\Windows Settings\Security Settings;

4. Butonul din dreapta al mouse-ului faceți clic pe File System și faceți clic Add File;

5. Select Local Disk (C:) și faceți clic Bine;

6. In the Database Security window, set the permissions you want, then clickBine;

7. In the Add Object window, select the ACL inheritance you want, then clickBine;

8. The Group Policy Editor displays the new object name;