Badcaps.net Forum
Go Back   Badcaps Forums > Troubleshooting Hardware & Devices and Electronics Theory > Troubleshooting & Designing Networks
Register FAQ Calendar Search Today's Posts Mark Forums Read

 
Thread Tools Display Modes
Old 03-16-2021, 03:35 PM   #1
m0seba
New Member
 
Join Date: Mar 2016
City & State: cairo
My Country: egypt
I'm a: Knowledge Seeker
Posts: 19
Default how to block copy from network access

hi
there is a small company have 4 computers and server with windows server 2016
all computers are entered into the server by local users, and there is shared folders on server with limited access to every computer
my question is there any method to disable copping form all shared folders on this server, but jest disable copy form server not paste on it.
my client want his team copy from their computers and paste on any shared folders on server, on the other way can not copy anything from shared folders to their computer.
or any way to disable copy on windows server for all users include network or usb drive, but as i mentioned just copy because they want to add data on server.
i don't know if i explained enough, so anyone understand me PLZ let me know any solution

thank you
m0seba is offline   Reply With Quote
Old 03-16-2021, 06:35 PM   #2
eccerr0r
Solder Sloth
 
eccerr0r's Avatar
 
Join Date: Nov 2012
City & State: CO
My Country: USA
Line Voltage: 120VAC 60Hz
I'm a: Hobbyist Tech
Posts: 5,819
Default Re: how to block copy from network access

This isn't really a "network" problem, rather a control access rights problem.
Problem is any permission to read the file implicitly allows people to copy the file outright. If you give no read access but allow write access...

So you need to rethink how the data is being shared/distributed/worked and this depends on exactly what data you're trying to do with the data - need details, from type and quantity of data. Usually people end up using some sort of transactional database to deal with things like this where the database is hidden and individual records are only available by query.
eccerr0r is online now   Reply With Quote
Old 03-16-2021, 06:39 PM   #3
petehall347
Badcaps Veteran
 
Join Date: Jan 2015
City & State: worcester
My Country: United Kingdom
I'm a: Knowledge Seeker
Posts: 2,736
Default Re: how to block copy from network access

you can try copy protect files.
petehall347 is offline   Reply With Quote
Old 03-17-2021, 12:41 AM   #4
diif
Badcaps Veteran
 
Join Date: Feb 2014
City & State: Midlands
My Country: England
I'm a: Professional Tech
Posts: 5,278
Default Re: how to block copy from network access

Active Directory Rights Management Services or RMS is what you need to use.
It's quite common to block users from saving on their personal PCs and just have them saving on the server.
diif is offline   Reply With Quote
Old 03-17-2021, 04:32 AM   #5
stj
Great Sage 齊天大聖
 
stj's Avatar
 
Join Date: Dec 2009
City & State: Europe
My Country: some shithole run by Israeli agents
I'm a: Professional Tech
Posts: 24,557
Default Re: how to block copy from network access

if you can view a file then it's in your ram - and can be saved.
likewise, if you can run an encrypted file then an unencrypted copy exists in ram - and can be saved.
stj is offline   Reply With Quote
Old 03-17-2021, 07:03 AM   #6
televizora
ghettomodmaster
 
Join Date: Nov 2016
City & State: Bulgaria
My Country: Bulgaria
Line Voltage: 230VAC 50Hz
I'm a: Student Tech
Posts: 881
Default Re: how to block copy from network access

If you have read access, you de facto have copy acess as well. But you can disable saving files on the computers by using registry or GPO if you have active directory.
__________________
Useful conversions. I don't "speak" imperial. Please use metric, if you want to address me.
1km=1000m=100000cm, 1inch=2.54cm, 1mile=1609.344meters, 1ft=30.48cm 1gal(US)=3.785liters, 1lb=453grams, 1oz=28.34grams
televizora is offline   Reply With Quote
Old 03-18-2021, 06:26 AM   #7
m0seba
New Member
 
Join Date: Mar 2016
City & State: cairo
My Country: egypt
I'm a: Knowledge Seeker
Posts: 19
Default Re: how to block copy from network access

Quote:
Originally Posted by eccerr0r View Post
This isn't really a "network" problem, rather a control access rights problem.
Problem is any permission to read the file implicitly allows people to copy the file outright. If you give no read access but allow write access...

So you need to rethink how the data is being shared/distributed/worked and this depends on exactly what data you're trying to do with the data - need details, from type and quantity of data. Usually people end up using some sort of transactional database to deal with things like this where the database is hidden and individual records are only available by query.
i spoke with client today, He thinks it's simple
just want disable copying from server to anything like usb or from shared folders to local computer
and in the same time his team can add and edit files on shared folders on server
about kind of files, can be anything especially word, excel, pdf files
m0seba is offline   Reply With Quote
Old 03-18-2021, 06:28 AM   #8
m0seba
New Member
 
Join Date: Mar 2016
City & State: cairo
My Country: egypt
I'm a: Knowledge Seeker
Posts: 19
Default Re: how to block copy from network access

Quote:
Originally Posted by petehall347 View Post
you can try copy protect files.

files always changed edited and added by team from local computers to shared folders
m0seba is offline   Reply With Quote
Old 03-18-2021, 06:38 AM   #9
m0seba
New Member
 
Join Date: Mar 2016
City & State: cairo
My Country: egypt
I'm a: Knowledge Seeker
Posts: 19
Default Re: how to block copy from network access

Quote:
Originally Posted by diif View Post
Active Directory Rights Management Services or RMS is what you need to use.
It's quite common to block users from saving on their personal PCs and just have them saving on the server.
the point is my client want to protect his files on server from copying especially from shared folders
but in the same time These shared folders always receive more files from the team
so the request is if i put any file on shared folder, then i can open it or edit and save changes, but i can not copy this file on my local computer again
m0seba is offline   Reply With Quote
Old 03-18-2021, 06:44 AM   #10
m0seba
New Member
 
Join Date: Mar 2016
City & State: cairo
My Country: egypt
I'm a: Knowledge Seeker
Posts: 19
Default Re: how to block copy from network access

Quote:
Originally Posted by televizora View Post
If you have read access, you de facto have copy acess as well. But you can disable saving files on the computers by using registry or GPO if you have active directory.
i want just disable copying
because all team works on this files on server they copy personal files to shared folders and edit and saved changes on it
the request is this files or shared folder on server cannot be made Copies on local computers again
m0seba is offline   Reply With Quote
Old 03-18-2021, 07:22 AM   #11
stj
Great Sage 齊天大聖
 
stj's Avatar
 
Join Date: Dec 2009
City & State: Europe
My Country: some shithole run by Israeli agents
I'm a: Professional Tech
Posts: 24,557
Default Re: how to block copy from network access

maybe FTP is the answer
stj is offline   Reply With Quote
Old 03-18-2021, 08:40 AM   #12
eccerr0r
Solder Sloth
 
eccerr0r's Avatar
 
Join Date: Nov 2012
City & State: CO
My Country: USA
Line Voltage: 120VAC 60Hz
I'm a: Hobbyist Tech
Posts: 5,819
Default Re: how to block copy from network access

If you can and need to read the whole file(s) then you can copy the whole thing. That's the problem.

Depending on the specific contents of the file, there are ways people have been using to deal with multiple people editing. Databases, distributed software development systems, CMS, etc. are all tools available to manage this problem.
eccerr0r is online now   Reply With Quote
Old 03-18-2021, 05:36 PM   #13
ChaosLegionnaire
HC Overclocker
 
Join Date: Jul 2012
City & State: Singapore
My Country: Singapore
Line Voltage: 240VAC 50Hz
I'm a: Hobbyist Tech
Posts: 2,826
Default Re: how to block copy from network access

yea but i think the OP's client just wants copy disabled to throw off the tech unsavvy. but its implementing "disable copy" in an insecure way. hackers or anyone savvy enuff with tech can still read the file and transfer/copy/move/dump the contents elsewhere. so just use directory rights management of some sort but beware the warning that eccerr0r said: if u can read the file, u can certainly copy the contents elsewhere through some other method.
ChaosLegionnaire is online now   Reply With Quote
Old 03-18-2021, 08:08 PM   #14
stj
Great Sage 齊天大聖
 
stj's Avatar
 
Join Date: Dec 2009
City & State: Europe
My Country: some shithole run by Israeli agents
I'm a: Professional Tech
Posts: 24,557
Default Re: how to block copy from network access

the other thing these days, if it's text and it can be viewed - it can be photographed with a phone.
(or a pen, or a keyfob etc!)
stj is offline   Reply With Quote
Old 03-18-2021, 08:56 PM   #15
eccerr0r
Solder Sloth
 
eccerr0r's Avatar
 
Join Date: Nov 2012
City & State: CO
My Country: USA
Line Voltage: 120VAC 60Hz
I'm a: Hobbyist Tech
Posts: 5,819
Default Re: how to block copy from network access

No not really, it seems the OP is expecting people to "edit" the file and copy right back to the shared server so other people can also have "hot" data instead of people having forked versions of the file causing a mess to re-merge all the data back... That's why I'm thinking the model the OP has is wrong - need to re-think how to deal with this data.

But again more information of the content of the file would be helpful to know what to do here. If it's like a word document or something, that's probably the worst case scenario perhaps...
eccerr0r is online now   Reply With Quote
Old 03-19-2021, 05:13 AM   #16
stj
Great Sage 齊天大聖
 
stj's Avatar
 
Join Date: Dec 2009
City & State: Europe
My Country: some shithole run by Israeli agents
I'm a: Professional Tech
Posts: 24,557
Default Re: how to block copy from network access

GIT, CVS, Bazar etc may be worth a look.
lots of revisioning systems used by programmers that keep track of changes and history
stj is offline   Reply With Quote
Old 04-24-2021, 04:50 PM   #17
EasyGoing1
Shock Therapist
 
EasyGoing1's Avatar
 
Join Date: Sep 2016
City & State: Victorville, CA
My Country: USA
Line Voltage: 120VAC 60Hz
I'm a: Hardcore Geek
Posts: 629
Default Re: how to block copy from network access

Quote:
Originally Posted by stj View Post
if you can view a file then it's in your ram - and can be saved.
likewise, if you can run an encrypted file then an unencrypted copy exists in ram - and can be saved.
This is from the Microsoft Active Directory Rights Management Website...

Notice you cant even paste from your clipboard, content that is protected with that service ...

__________________
EasyGoing1 is offline   Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump



Badcaps.net Technical Forums 2003 - 2021
Powered by vBulletin ®
Copyright ©2000 - 2021, Jelsoft Enterprises Ltd.
All times are GMT -6. The time now is 11:23 PM.
Did you find this forum helpful?