New Boss causing W2K Server Problems!

[kenny0305]

I am currently responsible for administering the W2K server at my workplace without a high level of training! I have managed so far to get by with SAMS books and such like.

However, I have just gained a new and very keen line manager who wants to apply certain changes to the way our IT is run. He has asked me to set up several areas on the existing server volumes to accomodate a document store, personal area's and departmental work area's.

The problems I have are as follows: -

Personal work areas are to be limited to 100Mb each. I believe I can achieve this by enabling disk quotas on the volume. However this means I would have to rebuild the volume or lose lots of space. Not sure this is the easiest way.

Departmental Work areas are also to be limited to a folder size of 100Mb. I can find no way of achieving this at a folder level. Several users will have access to each departments folder so limiting using disk quota's may not be the way to go.

He also wants me to lock down the local hard drives on all our workstation to prevent users from saving to them. I have no idea how to do this.

Please help!

[DaveC2003]

With Group Policy Objects in Windows, there is ...

With Group Policy Objects in Windows, there is a "Hide these specified drives in My Computer" option that lets you hide specific drives. However,

There are seven default options for restricting access to drives

To make changes to this policy for one of the seven default values:

1. Start the Microsoft Management Console. On the Console menu, click Add/Remove Snap-in.
2. Add the Group Policy snap-in for the default domain policy. To do this, click Browse when you are prompted to select a Group Policy Object (GPO). The default GPO is Local Computer. You can also add GPOs for other domain partitions (specifically, Organizational Units).
3. Open the following sections: User Configuration, Administrative Templates, Windows Components, and Windows Explorer.
4. Click Hide these specified drives in My Computer.
5. Click to select the Hide these specified drives in My Computer check box.
6. Click the appropriate option in the drop-down box.

These settings remove the icons representing the selected hard disks from My Computer, Windows Explorer, and My Network Places. Also, these drives do not appear in the Open dialog box of any programs.

[This policy does not prevent users from using other programs to gain access to local and network drives or prevent them from viewing and changing drive characteristics by using the Disk Management snap-in. ]