How to restrict users from email files from restricted folder

[Ricky]

Hi,

I've a folder containing PDF files which only allows the
users to view it (Used adobe security settings to prevent
changes and printing). Is there a way I can prevent the
users from emailing these files from the folder as
attachments ? Any advise would be most appreciated. Thanks.

 

[Miha Pihler]

Hi, well, yes it is possible but it is not something that is easily
achieved. You would need to implement the technology called Windows rights
management...

http://www.microsoft.com/windowsserver2003/technologies/rightsmgmt/default.mspx

Mike

 

[Ricky]

Hi,

I'm still on Windows 2000. Any solutions for this
platform ? Just need to prevent to users from attaching
any files from the mentioned folder to be sent as email.
Adobe acrobat security would only allow me to protect the
files from being modified, cut or print but users can
still email it as attachment files ! Any advise on this ?

 

[Miha Pihler]

No. As soon as user can open (read) the document he can attach it to e-mail
or save it locally to his hard drive, or ...

Mike

 

[Guest]

If users don't send a lot of PDF files in your company, you could block PDF files in your email filter, this will not allow the user to send your files.

Or you could simply deny all users write, modify rights to that folder, equip them all with acrobate reader, so that they can't save it to their desktop. Hopefully that will slow them in their tracks. Or better yet, give everyone strictly read only rights, and hide the folder from everyone, then just create a shortcut directly to the file and place it on their desktops or by other means. That will make sure they don't even know where it is.

 

[Miha Pihler]

Security through obscurity is not a very good security. Yes, you can block
PDF files on your SMTP... but then users will e.g. use hotmail account to
upload and send out PDF files.

Mike

 

[Guest]

If they are using Acrobat reader as I said, and the folder is hidden then they cannot even save nor know where to look for this file to send through hotmail.

 

[Eric Chamberlain, CISSP]

Unless they right click on the shortcut or search the drive for any hidden
files.

If they are using Acrobat reader as I said, and the folder is hidden then

they cannot even save nor know where to look for this file to send through
hotmail.

 

[Guest]

If a user is told not to email the files, and these actions are taken to stop them from doing so, and they still do it, disiplinary action should be taken.