Solved

Windows Server 2012 read only and not wanting any save to local computer

Posted on 2016-11-03
4
39 Views
Last Modified: 2016-11-22
How to prevent read only files on shared drive on Windows server 2012 from saving to local computer?
0
Comment
Question by:AMDewar
  • 2
4 Comments
 
LVL 42

Expert Comment

by:kevinhsieh
ID: 41873395
The only way I know of is to use Microsoft's Active Directory Rights Management Services. Note, that it requires additional licensing.

https://technet.microsoft.com/en-us/library/hh831364(v=ws.11).aspx
0
 
LVL 25

Expert Comment

by:Lionel MM
ID: 41873804
you could use icacls to deny access https://technet.microsoft.com/en-us/library/cc753525(v=ws.11).aspx. I will do some testing and get back to you but I believe the right to deny are the  M - modify access and RX - read and execute access rights.
0
 
LVL 42

Accepted Solution

by:
kevinhsieh earned 500 total points
ID: 41874318
The way to prevent users from copying files anywhere they have WRITE access, like a local workstation, would be to prevent users from READING the files, which means that they can't be opened or used at all.  There's nothing in NTFS that you can do on the server side. You would need to prevent users from writing files client side, or prevent access to web based email, drop box, etc.
0
 
LVL 1

Author Comment

by:AMDewar
ID: 41875792
I will look at these suggestions and will try them when they open on Monday...
Thanks
0

Featured Post

Is Your AD Toolbox Looking More Like a Toybox?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Recently, I was assigned the task of performing a hardware refresh in the datacenter. The previous Windows 2008 systems were connected to the SAN via fiber channel HBA’s and among other thing, had PowerPath installed in order to provide sufficient f…
A procedure for exporting installed hotfix details of remote computers using powershell
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
This tutorial will walk an individual through the process of installing the necessary services and then configuring a Windows Server 2012 system as an iSCSI target. To install the necessary roles, go to Server Manager, and select Add Roles and Featu…

839 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question