Monthly archives: September 2006

Timothy

Administrative Template to Restrict Write Access to Removable Drives

Looking for a way to restrict access to removable drives in your domain on your workstations?  It's easier than you might think!  There is a registry setting you can set that will turn all removable drives into read-only devices.  This includes USB thumb drives, hard drives, and even CD/DVD writers.  Of course editing the registry is a pain in the butt if you have a domain with dozens or hundreds of workstations, so I created this Administrative Template for use in Group Policy to configure this setting for you. 

Unfortunately, Microsoft did not store these settings in the "true policy" locations of the registry, so in the GPEDIT.MSC you need to click on Administrative Templates, then select View -> Filtering...  Uncheck "Only show policy settings that can be fully managed."  This will allow you to see the "preferences."  (Policy settings that are not fully managed are called Preferences.)  You can google for more information on the differences between policies and preferences. 

Enjoy!

Microsoft's explanation of Administrative Templates...
http://technet2.microsoft.com/WindowsServer/en/Library/8f0daf74-1eac-4d47-ac8a-bcbe23c673521033.mspx

Link to the Remove Storage Device administrative template...
http://www.avianwaves.com/tech/tools/RemovableStorageDevice_ADM

Timothy

Recursively setting attributes on NTFS files in VB.NET made easy

One thing I love about the new VB.NET in Visual Studio 2005 is the “My” namespace, which offers tons of useful code for common tasks in a single easy to find namespace.  As good as the My.Computer.FileSystem namespace is, however, it is lacking a way to easily change attributes on files. 

I needed to recursively remove all Read-Only and Hidden attributes in a folder hierarchy in order to copy over (write over) those files using the My.Computer.FileSystem.CopyDirectory method.  This method will throw an exception if a file is marked as Read-Only.  So, I wrote the following code segment to remove the Read-Only and Hidden attributes for me.  Of course this can be easily modified to set other attributes too.

Public Sub RemoveReadOnlyAttributes(ByVal folder As String)
  ' Remove attribute on individual files
  For Each filename As String In My.Computer.FileSystem.GetFiles(folder)
    System.IO.File.SetAttributes(filename, IO.FileAttributes.Normal)
  Next

  ' Recursively call this routine on all subfolders
  For Each foldername As String In My.Computer.FileSystem.GetDirectories(folder)
    RemoveReadOnlyAttributes(foldername)
  Next
End Sub

Blog

Search Posts

Recent Comments

  1. Re: DPM 2016 + SQL 2016 and "An unexpected error occurred during the installation" ID: 4387
    ptbNPA: FYI, after posting the issue on technet + windows-noob.com with no replies I decided to do a fresh Windows...

  2. Re: DPM 2016 + SQL 2016 and "An unexpected error occurred during the installation" ID: 4387
    ptbNPA: Hi and thanks for your post. I originally installed SQL 2016 with SP1 on a Windows server 2016 and got...

  3. Re: DPM 2016 + SQL 2016 and "An unexpected error occurred during the installation" ID: 4387
    Timothy: Update Rollup 2.

  4. Re: DPM 2016 + SQL 2016 and "An unexpected error occurred during the installation" ID: 4387
    Catwiesl: You write "Microsoft System Center Data Protection Manager (DPM) officially supports SQL 2016 with U...

  5. Re: PowerShell: Quickly Finding the Oldest and Newest Files in a Folder
    Neki: i would like to compare a local file with a remote file and download the remote file if its newer than...

  6. Re: RD Tabs: Tabbed Windows Remote Desktops
    lukas: Fantastic software though I am having issues saving passwords. As soon as I kill the program the setting...

  7. Re: Easy Way to Change Permissions on the Windows Server Scheduled Tasks Folder (C:\Windows\Tasks)
    George: From another server, using an admin account, I opened \\SERVER\c$\windows in Windows Explorer. Tasks...

  8. Re: PowerShell: Quickly Finding the Oldest and Newest Files in a Folder
    poo: would be great if you can help... i would like to compare a local file with a remote file and download...

  9. Re: Mystery of the Server 2008 + IIS7 + OLE = "MDAC Not Installed" Error
    Gwasshoppa: Interesting... I had this exact same error... One day the server was performing the task relating to...

  10. Re: Dish Network's DVR External Hard Drive Feature ROCKS!
    Linda: I am wanting to transfer also but I don't know which external hard drive I need, Help please

Archive

Tag Cloud