• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 401
  • Last Modified:

Is it possible to configure rights on Server 2008 that would allow a user to open and modify the file but not copy it?

Hello Experts,
I have a client that would like to lock down users from "copying" drafting files off the server.  The issue is that the drafting users will need to open and modify the files.  Can this be done?

Current Server: Winodws 200 Standard server

I was looking at Windows 2008 server with Active Directory Rights Management Services but did not see that specific configuration.

Thanks for your help!
0
Expetec
Asked:
Expetec
3 Solutions
 
NyradelCommented:
No. Because once opened the user can always save it as something different.  You can't stop someone from copying a file.
0
 
Darius GhassemCommented:
I agree no there is not currently a way.
0
 
andy_maskellCommented:
The only thing to do is to stop them copying onto external devices. I presume the problem is taking the files offsite without permission. There are dummy devices which lock USB ports which will be the main source of data copying. Remove or replace DVD/CD writers with readers only. Emailing could be an issue but you could always block users from sending attachments.
0
 
Joseph MoodyBlogger and wearer of all hats.Commented:
I agree with andy. Instead of preventing the users from making a copy, prevent the users from being able to remove the data.
To prevent users from emailing: either deny the computer internet access (ex: not giving them a default gateway) or deny attachments on a firewall
To prevent users from using thumbdrives: Enable Computer Config\Admin Templates\System\Device Installation\Device Installation Restrictions\Prevent installation of removeable devices and Prevent installation of devices not described by other policy settings
 
0
 
ExpetecAuthor Commented:
Thanks Experts!  Your advice is much appreciated!
0

Featured Post

 Email signature solution for Office 365

Easily set up a company-wide email signature in Office 365 that works with every email client. Add personalized email signatures to every email in your company. Let users preview their server-level signature in Outlook.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now