Windows Server 2016 GPO File System Security: Restricting Write Access to Root of Drive C:\

Windows Server 2016 GPO File System Security: Restricting Write Access to Root of Drive C:\. By default domain, users have rights to write in the root of Drive C:\, with this GPO we remove this ability.

1. Start Group Policy Management console;

2. Choose the GPO object, Right Mouse Button click, and click Edit;

3. Navigate to  Computer Configuration\Policies\Windows Settings\Security Settings;

4. Right Mouse Button click on File System and click Add File;

5. Select Local Disk (C:) and click OK;

6. In the Database Security window, set the permissions you want, then click OK;

7. In the Add Object window, select the ACL inheritance you want, then click OK;

8. The Group Policy Editor displays the new object name;