Solved

Restrict users from accessing volume shadow copies.

Posted on 2006-11-27
13
298 Views
Last Modified: 2012-06-21
Is their a way to stop users from accessing volume shadow copies. The users are using windows xp sp2 or using citrix.
0
Comment
Question by:life_j
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 4
  • 2
13 Comments
 
LVL 48

Accepted Solution

by:
Jay_Jay70 earned 250 total points
ID: 18025661
you could always disable VSS if you dont want them accessing it?
0
 
LVL 16

Expert Comment

by:kshays
ID: 18027437
My thoughts exactly Jay :D
0
 
LVL 7

Author Comment

by:life_j
ID: 18033892
Thanks James

I know that but I want to know even after enabling the VSS can I restrict the access to just administrators.SO that the users won't be able to restore the files back to the original location.
0
Three Reasons Why Backup is Strategic

Backup is strategic to your business because your data is strategic to your business. Without backup, your business will fail. This white paper explains why it is vital for you to design and immediately execute a backup strategy to protect 100 percent of your data.

 
LVL 48

Expert Comment

by:Jay_Jay70
ID: 18049137
LJ,

As far as i have seen with VSS its fairly simplistic.....though saying that i have never delved too deeply into it. VSS copies the exact files - permissions and all their attributes. There is also nothing via GPO that can control this to my knowledge
0
 
LVL 16

Expert Comment

by:kshays
ID: 18049187
I would think that if you were to implement VSS, the whole point is to allow the users themselves to restore their own file.  This just takes the administrative task off of you and lets the users be in control.  I would see no problem in this as long as your folder hiearchy is setup correctly.

Kevin
0
 
LVL 7

Author Comment

by:life_j
ID: 18050088
The problem is that I can't trust users, if by mistakethey restore the  whole folder back to a day or two then all the changes made during that 2 days would be lost.I think I got to disable the VSS altogether.
0
 
LVL 16

Expert Comment

by:kshays
ID: 18050806
True, my users are aware they have full control of their "folder" by department.  If they delete it or whatever it's at their discretion.  I do however create full backups 1x per week and diff backups everyday though, but that's for my sake :)

I would say you would need to disable vss as jay suggested, not really anything I can think of right now besides that.

Kevin
0
 
LVL 48

Expert Comment

by:Jay_Jay70
ID: 18066962
I agree, if you cannot trust them then they dont deserve the priv of VSS
0
 
LVL 16

Expert Comment

by:kshays
ID: 18084925
If the points are not awarded then I feel it should be no points refunded as well.  I cannot justify that life_j answered his own question with "I think I got to disable the VSS altogether."

Jays first post was the answer, I just backed it up was all.  The rest of the suggestions were "why" you want users to have access to VSS.

Kevin
0
 
LVL 48

Expert Comment

by:Jay_Jay70
ID: 18109908
Thank you Kodiakbear

Jay
0

Featured Post

Enterprise Mobility and BYOD For Dummies

Like “For Dummies” books, you can read this in whatever order you choose and learn about mobility and BYOD; and how to put a competitive mobile infrastructure in place. Developed for SMBs and large enterprises alike, you will find helpful use cases, planning, and implementation.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Preface Having the need * to contact many different companies with different infrastructures * do remote maintenance in their network required us to implement a more flexible routing solution. As RAS, PPTP, L2TP and VPN Client connections are no…
While rebooting windows server 2003 server , it's showing "active directory rebuilding indices please wait" at startup. It took a little while for this process to complete and once we logged on not all the services were started so another reboot is …
Nobody understands Phishing better than an anti-spam company. That’s why we are providing Phishing Awareness Training to our customers. According to a report by Verizon, only 3% of targeted users report malicious emails to management. With compan…
Exchange organizations may use the Journaling Agent of the Transport Service to archive messages going through Exchange. However, if the Transport Service is integrated with some email content management application (such as an antispam), the admini…

737 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question