We have a restricted Windows 7 computer that hides and prevents non-admin users from accessing the C Drive using the following policies:
However, they are able to circumvent this by typing the following into Explorer:
How can I disable this path but allow other UNC paths. For example they are allowed to access a shared folder on a different computer. eg.
Note: Simply Enabling the Group Policy: Remove Run menu from Start Menu will not work as this blocks all UNC paths.
The user, called Site User, is not a member of the
Administrator group directly or indirectly. It is only a member of the group
Accessed the following from:
Control Panel\All Control Panel Items\Administrative Tools\Computer Management (Local) > System Tools > Local Users and Groups
Local Users and Groups - Groups - Administators - Administrator - Service User (our admin user) - Users - NT AUTHORITY\Auntenticated Users (S-1-5-11) - NT AUTHORITY\INTERACTIVE (S-1-5-4) - Site User (user account in question)