RE: Restricting access to a CD-WR drive on a Win2K Server

From: Moorhouse, Walt P (WaltPMoorhouse@eaton.com)
Date: 09/19/02


From: "Moorhouse, Walt P" <WaltPMoorhouse@eaton.com>
To: 'Greene Paul' <greene_paul@bah.com>, focus-ms@securityfocus.com
Date: Thu, 19 Sep 2002 09:24:26 -0400

Paul,

Are they using some software to access it over the network, or are they
"packet writing" to it using a mapped drive? If you have shared the drive,
and they are mapping to it and dumping files, it's no problem. Just set it
up like you would any other folder. Create the groups on that machine (or
the domain, if applicable) and right click on the drive icon in My Computer.
Then choose sharing. Choose the share that they are connecting to. (I
assume that you have created a share, and they aren't all admins using the
hidden admin share, E$, or whatever drive it is.) Click Permissions and set
it up like you would permissions on any folder.

I have other concerns about this though. If it is a large number of people
using this, how do they prevent multiple people from writing at the same
time? In other words, how do they know the aren't writing accounting files
to a disc someone is already making for a customer? I would think a better
solution would be to set up a folder, and let them create subfolders in
that, then go down and burn that to disc, or have someone go down every so
often and make and distribute everyone's discs. (Maybe and Admin. Assist.
or something. You didn't specify how old the CD-RW is, but if it is very
old, it is slow. You don't want a high paid employee sitting there watching
it burn for 30 minutes.)

WPM

-----Original Message-----
From: Greene Paul [mailto:greene_paul@bah.com]
Sent: Wednesday, September 18, 2002 3:07 PM
To: focus-ms@securityfocus.com
Subject: Restricting access to a CD-WR drive on a Win2K Server

I have a client requesting an ability to restrict access to a CD-WR
drive on a Windows 2000 Server. It is a CD-WR drive shared over an
enterprise network; in other words the ones accessing the drive are not
at a local console.

They would like to be able to grant read/write access to the CD-WR drive
for a certain group of users, and only read access to another group of
users. Is there any registry settings that can configure this? Or, if
not, can anyone suggest a utility that has such functionality?

(They were hoping Windows has some built in functionality that can do
this; I suspect, though, that it would take a 3rd party utility to
achieve this.)

Paul Greene



Relevant Pages

  • Re: Correction: Erroneous Reporting in 1997 or 1998
    ... Sweet jesus I hope you won't be writing this much for EVERY retraction or ... correction you make. ... > In 1997 or 1998 while writing about the Masters division at Nationals ... > Goldemberg faced a high stall count and hucked the disc long. ...
    (rec.sport.disc)
  • Re: K3b and OpenSuse 10.3
    ... As to whether this is useful or not, so far wodim hasn't had a problem ... writing to DVDs on my systems. ... writing to disc, here's the output writing the 10.3-PPC-DVD.iso to an 8x ...
    (alt.os.linux.suse)
  • Re: Iomega HotBurn Pro
    ... "Cannot complete the CD Writing Wizard. ... The disc you have attempted to write may no longer be usable. ... And just as a side note, things were worse with Iomega HotBurn Pro before I ... >> It stops copying, ejects the disk, and the disk is no longer recognized. ...
    (microsoft.public.windowsxp.photos)
  • Re: Word 2003: That Nasty "Diks Full" bug
    ... You are correct in assuming that none of the writing is done to removable ... last night I copied one of the documents from the network ... removable media drive? ... We have a template stored somewhere on our network. ...
    (microsoft.public.word.application.errors)
  • Re: r8169 ethernet hangs after a pm-suspend (and resume)
    ... As far as the system is concerned the network is configured properly ... (was 0x2800005, writing 0x2800001) ... root hub lost power or was reset ...
    (Linux-Kernel)