Offline files & security

[Aaron Stamboulieh]

We have about 50 users who use Win XP Pro laptops in a Win 2K3 domain. They
are (against my wishes) all local administrators of their own machine. They
use Offline Files to work from home. As usual, when one person logs off, it
synchronizes their files. However, if person "A" works on the laptop of
person "B", then logs off, person "B" can then see all of person "A"s files
when offline, since they are local admins and can see anything that is
cached, even though they don't have permissions to those files on the
server. Is there anyway that can prevent this, and only allow them to have
access to their own files, without taking away the Admin right?

 

[CZ]

We have about 50 users who use Win XP Pro laptops in a Win 2K3 domain.
They
are (against my wishes) all local administrators of their own machine. They
use Offline Files to work from home. As usual, when one person logs off, it
synchronizes their files. However, if person "A" works on the laptop of
person "B", then logs off, person "B" can then see all of person "A"s files
when offline, since they are local admins and can see anything that is
cached, even though they don't have permissions to those files on the
server. Is there anyway that can prevent this, and only allow them to have
access to their own files, without taking away the Admin right?


Aron:

Use EFS.

or You might test the following:
Domain GPO has some settings for Offline Files:
User Config: Admin Templates: Network: Offline Files:
(has 17 lines of settings)
One of them is: Prevent use of Offline Files folder