Windows – Group Policy: Block access to \\localhost\C$

group-policypermissionsSecuritywindows 7

We have a restricted Windows 7 computer that hides and prevents non-admin users from accessing the C Drive using the following policies:

However, they are able to circumvent this by typing the following into Explorer:
\\localhost\C$

How can I disable this path but allow other UNC paths. For example they are allowed to access a shared folder on a different computer. eg. \\192.168.2.1\SharedTransfer

Note: Simply Enabling the Group Policy: Remove Run menu from Start Menu will not work as this blocks all UNC paths.

Update
The user, called Site User, is not a member of the Administrator group directly or indirectly. It is only a member of the group Users.

Accessed the following from:
Control Panel\All Control Panel Items\Administrative Tools\Computer Management (Local) > System Tools > Local Users and Groups

Local Users and Groups
 - Groups
      - Administators
             - Administrator
             - Service User (our admin user)
      - Users
             - NT AUTHORITY\Auntenticated Users (S-1-5-11)
             - NT AUTHORITY\INTERACTIVE (S-1-5-4)
             - Site User (user account in question)

Best Answer

You can disable the "Administrative share" from being created with GPP.

If you navigate to Computer Configuration / Preferences /Windows Settings / Network Shares, you’ll find this hidden gem. Right-click the Network Shares node to create a new share policy.

Source: http://sdmsoftware.com/group-policy-preferences/controlling-shares-on-windows-systems/

Would that solve your problem?

Related Question