How to disable Volume Shadow Copy via GP

G

Guest

When we had XP SP1 we controlled access to Volume Shadow "Previous Versions"
tab by only supplying the Volume Shadow Client software to selected users.

Since the nice people at Microsoft decided in their wisdom to include this
in SP2 I now have >3000 users with access to the "Previous Versions" tabs.
Given the abilities of our users this is not something we can live with.


KB article 888603 details a hotfix for both 2003 and XP that allows me to
disable
the tab, but seems very complicated for rolling out to > 3000 PC's

The 2003 hotfix now ships with 2003 sp1 but for XP I still have to get the
hotfix and install it on > 3000 PC's and then run reg scripts on them all.

Surely this update should be distributed via SUS and then a GPO could be
used to enable or disable this tab

Comments ?
 
G

Guest

Hi,

I have used a registry key permission in Group Policy to "restrict" access
to the Security Tab in Explorer so users cannot change permissions.

However, I don't know what the Reg key would be for the Previous Versions tab.

Is there a way just to actually "restrict" access to the locations you don't
want the users to restore? 90% of my users don't have right click on Files
and folders so that stopped access to the tab. However, I was in the opposite
boat in that I Wanted the users to be able to restore previous versions of
their own files.

Users can only restore previous versions of files on the server they have
access to. Is there a way to restrict access to the files instead?
 
J

Jerold Schulman

When we had XP SP1 we controlled access to Volume Shadow "Previous Versions"
tab by only supplying the Volume Shadow Client software to selected users.

Since the nice people at Microsoft decided in their wisdom to include this
in SP2 I now have >3000 users with access to the "Previous Versions" tabs.
Given the abilities of our users this is not something we can live with.


KB article 888603 details a hotfix for both 2003 and XP that allows me to
disable
the tab, but seems very complicated for rolling out to > 3000 PC's

The 2003 hotfix now ships with 2003 sp1 but for XP I still have to get the
hotfix and install it on > 3000 PC's and then run reg scripts on them all.

Surely this update should be distributed via SUS and then a GPO could be
used to enable or disable this tab

Comments ?

See tip 9016 » How can I remove the Previous Version tab from the Properties dialog?
in the 'Tips & Tricks' at http://www.jsifaq.com
 
G

Guest

In regard to "regsvr32 /u twext.dll" I tried it on xp client and file server,
it doens't work for me.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top