Using group policy objects to hide specified drives in My Computer

Whilst locking down the Windows XP desktop using an Active Directory group policy object, I needed to prevent access to certain drive letters that didn’t fall within the default settings. Microsoft knowledge base article 231289 details the process for editing the system.adm file to provide more control over access to particular drives.

I chose to write my own .adm file with just the relevant settings (although it fails to load in the same policy as system.adm, due to duplicate definitions, so needs to be applied through a separate policy).

One thought on “Using group policy objects to hide specified drives in My Computer


  1. Greetings,

    Great Job !!!

    But where do i copy .adm and by what name so that the client nodes are resitricted.

    Do you have on sharing a gobal calendar and an address book for the entire network.

    Awaiting for your response.

    Regards,
    Kaushik Mehta

Leave a Reply