Sharing Disc Drives IN RDC

[Guest]

We have a Windows 2003 Server running Terminal Services. There are many
times where users need to copy a file from the server to their local drives
and visa versa. At first we setup email as a way for users to move files
back and forth but this is not viable for the number of ussers. We are
reluctant to let users turn on disc drive sharing under Remote Desktop
Connection because it seems they have the ability to move files off of the
server.

Is there any way to allow them to only have the right to copy files from the
server when sharing their local disc drive resources??

Thank you

Andrew Bernstein

 

[Vera Noest [MVP]]

But if they can move files from the server to their local drives,
they can also delete those files completely from the server, isn't
it? Has nothing to to with having local drives redirected or not.
The solution in both cases is to only give them Read (not Modify)
permision on those files. Obviously, that is not a solution for
files within their home drive. User education is the only solution
there.
_________________________________________________________
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
TS troubleshooting: http://ts.veranoest.net
___ please respond in newsgroup, NOT by private email ___

 

[Guest]

They do need the right to modify the files though when on a terminal services
session. I guess I should be clear and ask is there a way to allow users to
copy the files from the server while restricting them from moving the files.
That would be one way to assure the files dont "disappear" completely. I
gues the same would hold true for stuff on the server. Is there a way to
allow modification with out being able to delete the file. Based on your
reply, I can only guess you cant have one without the other.

Thanks as always.
Andrew Bernstein

 

[Vera Noest [MVP]]

I have been experimenting a bit and it seems that you actually can
do this with advanced NTFS permissions.
Just remove the "Delete" permission form the "Modify" permission
list, leaving user with the "Read, Write & Execute" permission.

Then they can change the file, copy it, but not delete it.

_________________________________________________________
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
TS troubleshooting: http://ts.veranoest.net
___ please respond in newsgroup, NOT by private email ___