As for Volume shadow copy, if it is enabled for the volume, an user can access it, but are restricted via their NTFS permissions. So, if they have modify rights via both share and NTFS permission to the entire finance share, then yes, they could potentially overwrite everything by restoring a previous version. If they only have read access, they will not be able to copy files back, only read them and restore to a location where they have write access. We have found that training people on how to use it seems to be the best thing we can do if we don't want to turn it off completely.
From: James Rankin [mailto:[email protected]] Sent: Wednesday, April 28, 2010 7:20 AM To: NT System Admin Issues Subject: Disabling network drive options on Windows Server 2008 R2 Does anyone know if it is possible to disable certain network drive options in 2008 R2? Mainly the options to compress the drive, or use Volume Shadow Copy to restore a previous version? I am not sure if it is a genuine issue or not but I feel that if some user decides to run compression on the entire Finance drive, which holds a lot of databases, or restore a previous version from a few weeks ago, all hell may break loose. Is there any way to disable these options for the root of the drives via GPO or reg hack or some other option? Google-fu appears to indicate negatives so far.... TIA, JRR -- "On two occasions...I have been asked, 'Pray, Mr Babbage, if you put into the machine wrong figures, will the right answers come out?' I am not able rightly to apprehend the kind of confusion of ideas that could provoke such a question." ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
