Restrict file copying but allow reading

In the Configured Workstation s page, you can choose to apply the policy for a single workstation or a group of workstations. If you want to audit file copy events, select the File Copy Auditing policy from the existing list, and click Create Group. Enter a suitable Policy Name and Policy Description. To restrict files being copied from the server, choose the appropriate response type under Network Copy.

Choose the Block option if you want to disable file copy actions completely. Zypher Zypher Helvick Helvick Sign up or log in Sign up using Google.

Sign up using Facebook. Sign up using Email and Password. Post as a guest Name. Email Required, but never shown. The Overflow Blog. Stack Gives Back The help desk software for IT. Track users' IT needs, easily, and with only the features you need. Learn More ». Get answers from your peers along with millions of IT pros who visit Spiceworks.

Best Answer. AcesBlues This person is a verified professional. Verify your account to enable IT peers to see that you are a professional. View this "Best Answer" in the replies below ». CrashFF This person is a verified professional. AD RMS won't prevent somebody from copying a protected file to another location.

AD RMS is used to protect the contents of the file, not the actual file itself. If the file can be read, it can be copied. That's all a copy is.. The file is READ to memory, and then saved out of memory to some other location. Pure Capsaicin. Gary D Williams This person is a verified professional.

JoeDaddy wrote: I don't know of any full proof methods except for blocking USB drives so cannot be taken that way. That'll mean that they'll have to use another option, like emailing it or uploading it on a web form or using dropbox, owncloud, nextcloud, google docs, etc. Sign up today to participate, stay informed, earn points and establish a reputation for yourself! Log in. NTFS Permissions - execute but not copy? I have a group of engineering users who have developed software that is available for use by everyone on site.

The question they've asked me is: Is there a way to allow everyone to execute their software, but not copy them? At the moment they are simple compiled executable files sitting on a Windows server share, and users access them via both their Windows NT domain and Active Directory accounts.

I've experimented a bit with the advanced NTFS permissions on the folders, but haven't had any luck. As soon as they have enough rights to execute the programs, they also have the ability to copy them. Any thoughts? Asked 16 years ago views.