Allowing one user to access C drive whilst restricting others

group-policywindows-server-2008

In our group policy, there is a Staff Lockdown policy which uses the Administrative Templates/Windows Components/Windows Explorer key to restrict users' access to C: drives.

I would like to be able to allow a specific user to access the C drive of a specific machine (or the C: drive of all machines if that is easier).

What is the easiest / most appropriate way to acheive this?

The purpose of the question is to allow the user to install Dropbox locally on their machine since the Dropbox installer complains when a network drive is chosen as a destination.

Thanks.

Best Answer

I would find the dropbox EXE and add permissions to it to be able to read the full C drive. Leave all other permissions exactly as they are, but add one permission.