Limit users of accessing local drives

Question

Hello,
I have some specific question, also I'm not sure that this is right forum.
I have implemented AD infrastructure in my company.
Every user has his own workstation.
They use their D partition as backup storage. And that partition need to be locked for specific user that is
responsible for his workstation. So only user of workstation and domain administrator can see data on partition.
If John Doe is owner of Workstation, only he and domain admin can access data, if someone other log to this workstation (with other credentials from domain) he can't see data that's belong to John Doe.
It's looking nice and easy, but there is 2 tricky parts:
It's need to go thru GPO, because of number of workstations
On several workstations, there are 2 users, and they need to have 2 directories/folders for each one.
I hope that someone understand this mumbling. :)

Answer 1

Hi,
Apologize for my unclear reply, regarding to the filter option, it is not included inside the policy entry, it is used on an GPO as the snapshot below:
I have created a "test" GPO, then in the "Security Filterring"option, you can add the user\group as you want to allow or deny the permission to apply the GPO, by default, it has "Authenticated users", which means that all users
who have logged in with a username and password has permissions to apply the GPO.
http://technet.microsoft.com/en-us/library/cc728301(v=ws.10).aspx
http://technet.microsoft.com/en-us/library/cc752992.aspx
http://blogs.technet.com/b/grouppolicy/archive/2009/07/30/security-filtering-wmi-filtering-and-item-level-targeting-in-group-policy-preferences.aspx
Yolanda Zhu
TechNet Community Support