Solved

blocking saving anything on the Local HDD rather on the shared folder

Posted on 2014-09-26
3
57 Views
Last Modified: 2016-06-14
Need a solution

Block all users to save anything on their local HDD

AD 2008 R2 already in place

Any laptop users can able to do work while out of local lan and once they are on domain update the files.
0
Comment
Question by:shamnad
3 Comments
 
LVL 31

Accepted Solution

by:
Frosty555 earned 500 total points
ID: 40346685
Configure a GPO to set up Folder Redirection and redirect the user profile's Documents, Music, Videos, Desktop, Downloads etc. folders to your fileserver (which must, of course, be adequately equipped to handle all of the file storage needs of your network). Combine that with Offine Folder Caching so that when the users are off the network, they can still access their files, and Windows will handle maintaining the offline cache and syncing with the server once the user comes back online.

http://technet.microsoft.com/en-ca/library/cc732275.aspx

You can also use the GPO "Hide these specified drives in My Computer" to hide local drives in Windows Explorer, which makes it more difficult for users to put files directly on the local disk.

http://technet.microsoft.com/en-us/library/cc975948.aspx

It's important to make a best effort to "hide" the drives rather than actually configure security ACLs that prevent writing to the disk, because if you prevent the user from writing files to the local disk you'll run into all manner of system stability issues, crashing etc. Too many programs simply assume that writing to the local disk is possible, so you can't restrict it.

You CAN, however, hide the drives and make it difficult and un-intuitive for the users to access the local disk.
0
 

Author Comment

by:shamnad
ID: 40346987
which is the best practice
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
vmware fault tolerance site to site redundancy 10 30
sbs 2011 6 20
Why is a PSO not being set for users 2 24
sql query 3 39
by Nathan Brom/Bromy2004 Introduction There are numerous websites out there for any different type of program you can imagine.  Of those, you'll need to decide which ones are legitimate and aren't trying to steal your money or infect your comput…
Have you ever had a hard drive that you can't boot into, but need to change the registry? Here is the solution! This article guides you through accessing and editing a registry of a non-primary drive. To read registry information on a non-prim…
This video Micro Tutorial explains how to clone a hard drive using a commercial software product for Windows systems called Casper from Future Systems Solutions (FSS). Cloning makes an exact, complete copy of one hard disk drive (HDD) onto another d…
Windows 8 came with a dramatically different user interface known as Metro. Notably missing from that interface was a Start button and Start Menu. Microsoft responded to negative user feedback of the Metro interface, bringing back the Start button a…

911 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

16 Experts available now in Live!

Get 1:1 Help Now