Stop users from copying files off file server to their desktops

hi, was wondering if their is a way to stop users from copying files from our file server to their desktop.....either by third party application or group policy?

thanks for all the help.....
westhelpdeskAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

lamaslanyCommented:
Are you trying to prevent 'copy' or 'move'?
0
ManicDCommented:
a) have their desktops read only?
0
westhelpdeskAuthor Commented:
i dont want users copying or moving files from our server to their desktops

thanks for the help
0
The Ultimate Tool Kit for Technolgy Solution Provi

Broken down into practical pointers and step-by-step instructions, the IT Service Excellence Tool Kit delivers expert advice for technology solution providers. Get your free copy for valuable how-to assets including sample agreements, checklists, flowcharts, and more!

techzterCommented:
I don't believe that you can stop it with NTFS permissions. Once they have read access than they can make a copy. Using group policy you could perhaps lock down users accounts so that they were not able to use the clipboard, or weren't able to save files, but I think that is more than what you are trying to block. I think that your best bet would be to use some third party monitoring software such as...

http://www.employee-activity-monitor.org/

Even this wouldn't block them from copying but it would alert you that it had been done.
0
nappy_dThere are a 1000 ways to skin the technology cat.Commented:
By default you cannot stop users from copying files.

However however, if you encrypt their workstation hdd, they will not be able to read the data on anything else but a company computer that has the decryption software.

Otherwise you would have to move to Netware and Zen for desktops which I recall having such a feature.
0
lamaslanyCommented:
If they can read it they can copy it.  Your only recourse would be to lock the client down so heavily that there is nowhere on the client they can write it too!  

It is a little easier if you just don't want them taking an offline copy (copy on removable media).
0
lamaslanyCommented:
With reference to nappy_d's reply you can look at Digital Rights Management on the document itself rather than using full disk encryption.
0
nappy_dThere are a 1000 ways to skin the technology cat.Commented:
Alternatively, install Windows 2008 server, configure RemoteApp and they can work via the server on applications and documents.  doing this, will prevent work from ever leaving the server.

http://windowsitpro.com/article/articleid/100986/windows-server-2008s-remoteapp.html
0
techzterCommented:
If you're thinking of this as a long term plan, and not just a short term fix, you could consider migrating to terminals instead of everyone using pc's. You could instead use Citrix, or Terminal Services, with roaming profiles. Once that was in place the users would only have access to the server drive locations and there would be no local drive to copy things to. At least once you locked down external peripherals and burners.
0
techzterCommented:
Sorry for the similar answer nappy_d. I was typing at the same times as you. I guess great minds think alike. ;)
0
westhelpdeskAuthor Commented:
lamaslany:

what is Digital Rights Management and its capibiliies......is this just installed on server or both server and client machine.....thanks,,,,

0
lamaslanyCommented:
By encrypting the document you can control who can decrypt it (and thus read and/or modify it).  The beauty of this is that you can revoke a certificate to prevent a user from accessing the document even if they have had access in the past.

If your concern is that the document not be copied, even in it's encrypted form, then the Terminal Server suggestion may be best.  

It depends on *why* you want to stop users copying files.  Is it security?  Or to prevent duplication/versioning issues?
0
nappy_dThere are a 1000 ways to skin the technology cat.Commented:
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
westhelpdeskAuthor Commented:
thanks,
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2003

From novice to tech pro — start learning today.