?
Solved

Enforcing DACLs Server 2012

Posted on 2016-10-11
1
Medium Priority
?
20 Views
Last Modified: 2016-10-16
I am looking into setting up Dynamic ACLs and was wondering if policies follow the file throughout the network. For example if I have policies on a share on Fileserver1 called HR. Then someone from HR copies that file off of the share and onto their local computer or to a different share. Does that now invalidate the protection offered by DACL or does it somehow follow the file to make sure only HR can read the file regardless of where it is moved to?
0
Comment
Question by:OriNetworks
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
1 Comment
 
LVL 42

Accepted Solution

by:
Adam Brown earned 2000 total points
ID: 41838959
DACLs apply only to the shares/folders they are applied to. If you want to prevent people from copying files or sending them to other people when they have access to them, you would need to look at deploying AD Rights Management Services. That gives you much more control over that type of thing.
0

Featured Post

Free Tool: Port Scanner

Check which ports are open to the outside world. Helps make sure that your firewall rules are working as intended.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

My GPO's made for 2008 R2 servers were not allowing me to RDP into a new 2012 server by default.  That’s why I tried to allow RDP via Powershell, because I could log into a remote shell without further configuration. Below I will describe how I wen…
Resolve DNS query failed errors for Exchange
In this Micro Tutorial viewers will learn how to restore their server from Bare Metal Backup image created with Windows Server Backup feature. As an example Windows 2012R2 is used.
This tutorial will walk an individual through the process of configuring basic necessities in order to use the 2010 version of Data Protection Manager. These include storage, agents, and protection jobs. Launch Data Protection Manager from the deskt…

718 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question