NTFS Security

Monrad.DC_at_forces.gc.ca
Date: 01/11/05

  • Next message: Paul Howe: "Anti-spyware Beta from Microsoft available" 
    To: focus-ms@securityfocus.com
Date: Tue, 11 Jan 2005 09:40:13 -0500

    I am looking at securing some USB memory sticks, to allow all domain users
    access on domain networked computers, but to restrict access from non-domain
    computers (home/internet/etc).

    Giving domain users full permission and removing everyone works to a small
    degree.
    Plugging the usb drive into an XP machine comes up with a message that the
    drive is unaccessible, but you can access it by taking ownership. As most
    home users are the local admin, this solves nothing.

    Going one step further and setting special permissions deny take
    ownership/deny change permissions for everyone does not seem to stop the
    local admin from another domain/workgroup from accessing the data.

    Is there a Microsoft or third party solution to this, without encrypting the
    data and restricting access to specified individuals?

    Drew

    ---------------------------------------------------------------------------
    ---------------------------------------------------------------------------

  • Next message: Paul Howe: "Anti-spyware Beta from Microsoft available"