Data type


Default value





Prevents users from using My Computer to access the content of selected drives.

When a drive is represented in the value of this entry, users cannot view the contents of the selected drives in My Computer or in Windows Explorer. Also, they cannot use the Run dialog box, the Map Network Drive dialog box, or the Dir command to view the directories on these drives.

This entry stores the setting of the Prevent access to drives from My Computer Group Policy. Group Policy adds this entry to the registry when you enable the policy. If you disable the policy or set it to Not configured, Group Policy deletes this entry from the registry, and the system behaves as though the value is 0x0.

The value of this entry is a 32-bit bitmask. The lower 26 bits correspond to the 26 letters used to identify drives on the local computer and its network. The rightmost bit represents drive A; the 26th bit from the right represents drive Z. To restrict access to a drive, set the bit that corresponds to its drive letter to 1. To permit access to a drive, set the bit that corresponds to its drive letter to 0. To restrict access to all 26 drives, set all bits to 1, which corresponds to a value of 0x3FFFFFF.

Group Policy sets the value of this entry to one of the following:




Do not restrict any drives. All drives appear.


Restrict A and B drives only.


Restrict C drive only.


Restrict A, B, and C drives only.


Restrict D drive only.


Restrict A, B, C, and D drives only.


Restrict all drives.

Change method

To change the value of this entry, use Group Policy. This entry corresponds to the Prevent access to drives from My Computer Group Policy (User Configuration\Administrative Templates\Windows Components\Windows Explorer). Select a drive or combination of drives from the drop-down list.

Note Image Note

If the policy is enabled, the icons representing the specified drives still appear in My Computer, but, if a user double-clicks the icons, a message appears explaining that a policy prevents the action.

This entry does not prevent users from using programs to access local and network drives. Also, it does not prevent users from using the Disk Management snap-in to view and change drive characteristics.

By default, the system permits access to all drives. Therefore, disabling the Prevent access to drives from My Computer policy, not configuring the policy, or enabling the policy and setting it to Do not restrict drives have no effect on the system.

Tip Image Tip

For detailed information about particular Group Policy settings, see the Windows 2000 Resource Kit Group Policy Reference.

For general information about Group Policy, see Windows 2000 Server Help or Windows 2000 Professional Help.

To see a table associating policies with their corresponding registry entries, see the Group Policy Registry Table .

Related Entries

Page Image