RE: Restricting access to a CD-WR drive on a Win2K Server
From: Moorhouse, Walt P (WaltPMoorhouse@eaton.com)Date: 09/19/02
- Previous message: Preston Hillensbeck: "3 Strikes Your Out Password Policy"
- Maybe in reply to: Greene Paul: "Restricting access to a CD-WR drive on a Win2K Server"
- Next in thread: Kurt Seifried: "Re: Restricting access to a CD-WR drive on a Win2K Server"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: "Moorhouse, Walt P" <WaltPMoorhouse@eaton.com> To: 'Greene Paul' <greene_paul@bah.com>, focus-ms@securityfocus.com Date: Thu, 19 Sep 2002 09:24:26 -0400
Paul,
Are they using some software to access it over the network, or are they
"packet writing" to it using a mapped drive? If you have shared the drive,
and they are mapping to it and dumping files, it's no problem. Just set it
up like you would any other folder. Create the groups on that machine (or
the domain, if applicable) and right click on the drive icon in My Computer.
Then choose sharing. Choose the share that they are connecting to. (I
assume that you have created a share, and they aren't all admins using the
hidden admin share, E$, or whatever drive it is.) Click Permissions and set
it up like you would permissions on any folder.
I have other concerns about this though. If it is a large number of people
using this, how do they prevent multiple people from writing at the same
time? In other words, how do they know the aren't writing accounting files
to a disc someone is already making for a customer? I would think a better
solution would be to set up a folder, and let them create subfolders in
that, then go down and burn that to disc, or have someone go down every so
often and make and distribute everyone's discs. (Maybe and Admin. Assist.
or something. You didn't specify how old the CD-RW is, but if it is very
old, it is slow. You don't want a high paid employee sitting there watching
it burn for 30 minutes.)
WPM
-----Original Message-----
From: Greene Paul [mailto:greene_paul@bah.com]
Sent: Wednesday, September 18, 2002 3:07 PM
To: focus-ms@securityfocus.com
Subject: Restricting access to a CD-WR drive on a Win2K Server
I have a client requesting an ability to restrict access to a CD-WR
drive on a Windows 2000 Server. It is a CD-WR drive shared over an
enterprise network; in other words the ones accessing the drive are not
at a local console.
They would like to be able to grant read/write access to the CD-WR drive
for a certain group of users, and only read access to another group of
users. Is there any registry settings that can configure this? Or, if
not, can anyone suggest a utility that has such functionality?
(They were hoping Windows has some built in functionality that can do
this; I suspect, though, that it would take a 3rd party utility to
achieve this.)
Paul Greene
- Previous message: Preston Hillensbeck: "3 Strikes Your Out Password Policy"
- Maybe in reply to: Greene Paul: "Restricting access to a CD-WR drive on a Win2K Server"
- Next in thread: Kurt Seifried: "Re: Restricting access to a CD-WR drive on a Win2K Server"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|