Masters, you do not understand Windows rights management, to achieve the following functions,
1. A usb device, some users can access, users are not visible (hidden drive)
2. A usb device, for some users can write, some user read-only

More popular said, put on the Windows of a few u disk, control each user access to the u disk

Can be achieved?
If possible, is there any Windows API can call control?

CodePudding user response:

Solution a:
Using the Windows active directory domain control, can achieve what you need, the problem is the Infrastructure assume more troublesome, but also independent server

Solution 2:
Write a small program, the background, firstly enumerate all drive, make sure all USB drive, and then remove everyone read permissions, increase specific users read and write access, (the problem is that the U disk to other computer, users can still read data - that is to cooperate with use and small program)

CodePudding user response:

reference 1st floor yli5891 response:

solution a:
Using the Windows active directory domain control, can achieve what you need, the problem is the Infrastructure assume more troublesome, but also independent server

Solution 2:
Write a small program, the background, firstly enumerate all drive, make sure all USB drive, and then remove everyone read permissions, increase specific users read and write access, (the problem is that the U disk to other computer, users can still read data - that is to use) and small program

Scheme ii, it's the best if you can realize, process control, as long as the set rules can be automatically controlled,
Has the following verification points:
1. On a usb drive "to get rid of everyone read permissions, increase specific users read and write access"
Rights management of Windows without contact, have no idea, can provide detailed way?

Trouble, thank you!

CodePudding user response:

@ yli5891 manual operation and usb is fat32, property without "security" TAB, only the formatting to NTFS, the only option,
Does that mean "remove everyone read permissions, increase specific user permissions to read and write", in this case is not possible?

CodePudding user response:

reference yqw1122 reply: 3/f

@ yli5891 manual operation and usb is fat32, attribute without "security" TAB, only the formatting to NTFS, just have options,
Does that mean "remove everyone read permissions, increase specific user permissions to read and write", in this case is not possible?

Yes, if you don't need as a startup disk U disk, as well as the installation disk, actually can eliminate FAT format
To NTFS format, there is a command line tools can automate the folder permissions

CodePudding user response:

reference yqw1122 reply: 3/f

@ yli5891 manual operation and usb is fat32, attribute without "security" TAB, only the formatting to NTFS, just have options,
Does that mean "remove everyone read permissions, increase specific user permissions to read and write", in this case is not possible?

So it is not in conformity with the requirements, insert u disk format is uncertain, can not be artificially modified format

CodePudding user response:

Learning how to learn, to help the top!

CodePudding user response:

I also want to know to help

CodePudding user response:

Under the environment of the AD do strategy immediately