File Security

  • Thread starter Thread starter Colin
  • Start date Start date
C

Colin

I can make files on a server read only, the users cannot
save them to the server BUT they can saveas to the own
hard drives. How can I stop this behaviour?
 
I believe you mean the users have read only access to a folder versus the read only
file attribute. Anyhow you want to check that the root/drive folder has no more that
read/list/execute permissions for the users and everyone group [checking advanced
permissions also] and any other folders that have been created in the root/drive
folder since installation. By default users have full control to their profile folder
under documents and settings where their My Documents folder is also located. You can
change permissions on their local profile folder also if needed. --- Steve
 
You cannot do this without additional technology. "Read" means "read into
the computer's local memory." Once there, the local user of that machine can
pretty much do anything they want with it, including selecting "Save as"
from the File menu and saving a copy on the local hard drive.

Windows Rights Management Services can help here. The creator of a document
can grant certain users (or everyone) "read-only" rights. When an authorized
user opens the document, the application enforces the rights and disables
all save, copy, export, and print functions.

Of course, RMS requires setting up an infrastructure and purchasing client
CALs. It also requires using applications that are rights-aware.
Rights-protected documents are encrypted when living on storage (either
network or local). Only right-aware applications are capable of obtaining
the decryption keys, rendering the decrypted contents in the window, and
enforcing the restrictions on the document.
 
Back
Top