• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 600
  • Last Modified:

Prevent data being copied from Server 2003

Hi All,

Have a 2003 Serverver Standard domain controller. The users require full rights to the respective shared data, but must be prevented from copying the data to their local hard disks.

Is it possible?

regards,

bb
0
about-it
Asked:
about-it
2 Solutions
 
Lee W, MVPTechnology and Business Process AdvisorCommented:
Sort of.  If they can read the data at all, they can copy the data to their workstations.

You would have to lock their workstations down so they don't have write access to any location (except those like the temp folder) and redirect folders like "my Documents" and the "desktop" to the server.

0
 
Cherukuri30Commented:
Even if work station is locked they still can copy into external medea. protecting the data from copying is not possible when the share is with full access

0
 
Lee W, MVPTechnology and Business Process AdvisorCommented:
Cherukuri30,

Locking down a station means locking down a station - Disable USB ports, floppy drive, CD-R/DVD-R abilities.  The one thing you cannot take into account is e-mail - unless you have some expensive e-mail management software products.
0
VIDEO: THE CONCERTO CLOUD FOR HEALTHCARE

Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

 
about-itAuthor Commented:
Thoght so,

Is it possible to have a use loged onto the domain prevent access to local drives, but allow access to local drives when offsite and the domain controller unavailable?

bb
0
 
Cherukuri30Commented:
Ok Leew i understood what you mean.
0
 
Jeffrey Kane - TechSoEasyPrincipal ConsultantCommented:
about-it,

there are certainly ways to prevent copying of data... but I would first ask what form the data is in.  If it's Office Documents, then you should be using Information Rights Management:  http://www.microsoft.com/windowsserver2003/technologies/rightsmgmt/default.mspx

Other data can be secured in various ways based on the program used.  PDF's can be secured through PDF Security settings.

Unfortunately, you will have to wait for Windows Vista to get ALL of the best built-in data security:
http://www.microsoft.com/technet/windowsvista/evaluate/feat/secfeat.mspx

However, in the mean time some of the Vista Security Features are available through downloads.

Lastly, you can always monitor File Access activity.  The Group Policy How-to is here:
http://technet2.microsoft.com/WindowsServer/en/Library/3b5204b3-8b18-4b14-babd-a81532331af61033.mspx?mfr=true

There are also a ton of 3rd party applications which will perform these type functions.  Search for Sarbanes-Oxley Compliance and you'll find lots.

Jeff
TechSoEasy
0

Featured Post

Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Tackle projects and never again get stuck behind a technical roadblock.
Join Now