It's been observed that "Operator" can access C: Drive , D: Drive, Network system also -- after opening of trends (File > Open>)
Can it be possible to hide these drives from operator view? and make specified selected folder available? Since the operator, would like
to make trends and save it to specfic directory. If so, what are the selected security parameter / tempalate of windows to configure?
See the following articles. They describe using group/system policies to change the registry values which hide drives from applications unless they are explicity pathed (i.e. if I type c:\deltav\bin in the file explorer menu I can still get it).:
support.microsoft.com/.../231289
support.microsoft.com/.../220955
Then you can map drives with letters that are not hidden to have a place to store files. I would make the policies selective based on user group membership or OU.
In reply to Youssef.El-Bahtimy: