How can I stop users accessing local drives via Internet Explorer?

A. If you type "C:" (or any other drive) in the MicrosoftInternet Explorer address box you will be shown the contents and if proper NTFSfile permissions are not in place users will be able to delete, rename, readany files on the disk. This is usually a problem if you have a locked downenvironment where users do not normally have access to Explorer etc (such as anInternet Cafe).

To stop the ability to view local drives from Internet Explorer perform thefollowing:

The NoRun setting disables viewing local files by typing a file address orURL (for example, "file://d:") in the Address box, and also disablesthe Run command on the Start menu.

The NoDrives setting disables the selected drives. It is explained in 'Q. How can I hide drive x from users?'. Basically drive A is1, B is 2, C is 4, D is 8 etc. and you add the values together. So to hidedrive C and D, you would add 4 and 8 which is twelve or C in hexadecimal andset NoDrives to C (selecting Hex mode).

Additional restrictions can be applied to IE 4.01 Service Pack 2 and IE 5.0which are described in 'Q. What additionrestrictions are available in Internet Explorer IE4.01 SP2 and above?'