Sharing Disc Drives IN RDC

[Andrew Bernstein]

We have a Windows 2003 Server running Terminal Services. There are many
times where users need to copy a file from the server to their local drives
and visa versa. At first we setup email as a way for users to move files
back and forth but this is not viable for the number of ussers. We are
reluctant to let users turn on disc drive sharing under Remote Desktop
Connection because it seems they have the ability to move files off of the
server.

Is there any way to allow them to only have the right to copy files from the
server when sharing their local disc drive resources??

Thank you

Andrew Bernstein

[Vera Noest [MVP]]

But if they can move files from the server to their local drives,
they can also delete those files completely from the server, isn't
it? Has nothing to to with having local drives redirected or not.
The solution in both cases is to only give them Read (not Modify)
permision on those files. Obviously, that is not a solution for
files within their home drive. User education is the only solution
there.
_________________________________________________________
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
TS troubleshooting: http://ts.veranoest.net
___ please respond in newsgroup, NOT by private email ___

"=?Utf-8?B?QW5kcmV3IEJlcm5zdGVpbg==?="

Post by Andrew Bernstein
We have a Windows 2003 Server running Terminal Services. There
are many times where users need to copy a file from the server
to their local drives and visa versa. At first we setup email
as a way for users to move files back and forth but this is not
viable for the number of ussers. We are reluctant to let users
turn on disc drive sharing under Remote Desktop Connection
because it seems they have the ability to move files off of the
server.
Is there any way to allow them to only have the right to copy
files from the server when sharing their local disc drive
resources??
Thank you
Andrew Bernstein

[Andrew Bernstein]

They do need the right to modify the files though when on a terminal services
session. I guess I should be clear and ask is there a way to allow users to
copy the files from the server while restricting them from moving the files.
That would be one way to assure the files dont "disappear" completely. I
gues the same would hold true for stuff on the server. Is there a way to
allow modification with out being able to delete the file. Based on your
reply, I can only guess you cant have one without the other.

Thanks as always.
Andrew Bernstein

Post by Vera Noest [MVP]
But if they can move files from the server to their local drives,
they can also delete those files completely from the server, isn't
it? Has nothing to to with having local drives redirected or not.
The solution in both cases is to only give them Read (not Modify)
permision on those files. Obviously, that is not a solution for
files within their home drive. User education is the only solution
there.
_________________________________________________________
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
TS troubleshooting: http://ts.veranoest.net
___ please respond in newsgroup, NOT by private email ___
"=?Utf-8?B?QW5kcmV3IEJlcm5zdGVpbg==?="

Post by Andrew Bernstein
We have a Windows 2003 Server running Terminal Services. There
are many times where users need to copy a file from the server
to their local drives and visa versa. At first we setup email
as a way for users to move files back and forth but this is not
viable for the number of ussers. We are reluctant to let users
turn on disc drive sharing under Remote Desktop Connection
because it seems they have the ability to move files off of the
server.
Is there any way to allow them to only have the right to copy
files from the server when sharing their local disc drive
resources??
Thank you
Andrew Bernstein

[Vera Noest [MVP]]

I have been experimenting a bit and it seems that you actually can
do this with advanced NTFS permissions.
Just remove the "Delete" permission form the "Modify" permission
list, leaving user with the "Read, Write & Execute" permission.

Then they can change the file, copy it, but not delete it.

_________________________________________________________
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
TS troubleshooting: http://ts.veranoest.net
___ please respond in newsgroup, NOT by private email ___

"=?Utf-8?B?QW5kcmV3IEJlcm5zdGVpbg==?="

Post by Andrew Bernstein
They do need the right to modify the files though when on a
terminal services session. I guess I should be clear and ask is
there a way to allow users to copy the files from the server
while restricting them from moving the files. That would be one
way to assure the files dont "disappear" completely. I gues the
same would hold true for stuff on the server. Is there a way to
allow modification with out being able to delete the file.
Based on your reply, I can only guess you cant have one without
the other.
Thanks as always.
Andrew Bernstein

Post by Vera Noest [MVP]
But if they can move files from the server to their local
drives, they can also delete those files completely from the
server, isn't it? Has nothing to to with having local drives
redirected or not. The solution in both cases is to only give
them Read (not Modify) permision on those files. Obviously,
that is not a solution for files within their home drive. User
education is the only solution there.
_________________________________________________________
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
TS troubleshooting: http://ts.veranoest.net
___ please respond in newsgroup, NOT by private email ___
"=?Utf-8?B?QW5kcmV3IEJlcm5zdGVpbg==?="

Post by Andrew Bernstein
We have a Windows 2003 Server running Terminal Services.
There are many times where users need to copy a file from the
server to their local drives and visa versa. At first we
setup email as a way for users to move files back and forth
but this is not viable for the number of ussers. We are
reluctant to let users turn on disc drive sharing under
Remote Desktop Connection because it seems they have the
ability to move files off of the server.
Is there any way to allow them to only have the right to copy
files from the server when sharing their local disc drive
resources??
Thank you
Andrew Bernstein