?
Solved

Enforcing DACLs Server 2012

Posted on 2016-10-11
1
Medium Priority
?
24 Views
Last Modified: 2016-10-16
I am looking into setting up Dynamic ACLs and was wondering if policies follow the file throughout the network. For example if I have policies on a share on Fileserver1 called HR. Then someone from HR copies that file off of the share and onto their local computer or to a different share. Does that now invalidate the protection offered by DACL or does it somehow follow the file to make sure only HR can read the file regardless of where it is moved to?
0
Comment
Question by:OriNetworks
1 Comment
 
LVL 44

Accepted Solution

by:
Adam Brown earned 2000 total points
ID: 41838959
DACLs apply only to the shares/folders they are applied to. If you want to prevent people from copying files or sending them to other people when they have access to them, you would need to look at deploying AD Rights Management Services. That gives you much more control over that type of thing.
0

Featured Post

Simplify Active Directory Administration

Administration of Active Directory does not have to be hard.  Too often what should be a simple task is made more difficult than it needs to be.The solution?  Hyena from SystemTools Software.  With ease-of-use as well as powerful importing and bulk updating capabilities.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Sometimes drives fill up and we don't know why.  If you don't understand the best way to use the tools available, you may end up being stumped as to why your drive says it's not full when you have no space left!  Here's how you can find out...
How to deal with a specific error when using the Enable-RemoteMailbox cmdlet to create a mailbox in the cloud-based service, for an existing user in an on-premises Active Directory.
In this Micro Tutorial viewers will learn how to use Windows Server Backup to create full image of their system. Tutorial shows how to install Windows Server Backup Feature on Windows 2012R2 and how to configure scheduled Bare Metal Recovery backup.…
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
Suggested Courses

592 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question