Re: restricting copying

If a user is running the application locally on their workstation it is next
to impossibly to prevent some form of copying that could include printing
data, photographing the monitor, emailing the data, etc.

To minimize the chance of actually taking data files out side the network
you could consider using Terminal Services to run the application making
sure that clients can not redirect their hard drives, copy to clipboard,
access the internet, or be able to save files to any computer that have
physical access to that has access to USB, cdrom/dvd, internet, etc. Other
options include having all their workstations in a computer safe that only
allows the cables out to their keyboard/mouse/monitor, or otherwise making
sure they don't have access to their computers innards and plugging all
USB/firewire/etc ports with epoxy or such and making sure computer does not
have writeable cdrom/dvd drives or have internet access.

Also implementing user access according to principle of least privilege will
help prevent data that the user does not need access to from being stolen.
That can be done by managing user group membership so that user is not a
member of privileged groups unless there is no other option and that users
do not have permissions to shares/folders that he does not need access to in
order to do his job and making sure that computers that contain any
sensitive data are physically secured to some degree.

Steve

http://technet.microsoft.com/en-us/library/bb456992.aspx --- Principle of
least user privilige
http://www.mcmcse.com/microsoft/guides/ntfs_and_share_permissions.shtml ---
basics of share and NTFS permissions


"Bill Brehm" <don't want spam> wrote in message
news:%23jxsGLrHIHA.824@xxxxxxxxxxxxxxxxxxxxxxx
Hi. We keep our data files on a server and have workstations to access the
data. I would like to arrange security so that staff can access the files
with the applications they need to work on the data. But I would like to
prevent the staff from copying the files to a USB drive or burning files
to a CDROM or DVDROM or any other methods that they could use to bring the
data out of the company.

Any there any settings in XP or programs I can install to help prevent
removal of data that doesn need to be accessed by them as part of their
work?

The main application, btw, is Solidworks (CAD).

Thanks...



.

Relevant Pages

  • RE: Routing oddity on domain.
    ... The client workstation 's gateway should be the Router internal IP address ... >I. Please check DNS and Gateway settings. ... >II Please ensure proper binding order of the network adapter cards. ... Click Internet Protocl, and then click Properties. ...
    (microsoft.public.windows.server.sbs)
  • RE: Routing oddity on domain.
    ... Please give me the Route table of any problematic workstation for analyze. ... I am not sure that is correct as the server has two network cards in it, ... the connection to the internet gets routed between the ...
    (microsoft.public.windows.server.sbs)
  • RE: Internet Connection Slow
    ... Does this reloaded XP workstation work normally before? ... Check "Hide all Microsoft Services", click Disable All and clear "Hide ... F. Try accessing the internet website, ... Since the low performance of internet connection can be caused by ...
    (microsoft.public.windows.server.sbs)
  • Re: OWA Reinstall
    ... In the router, is port 443 forwarded to external NIC IP address? ... If you connect a spare workstation to a free port on the router ... Have you run the Connect to the Internet Wizard, ... how is the server connected to the internet (number of NICs, ...
    (microsoft.public.windows.server.sbs)
  • RE: MS - Licensing/registration
    ... anything via the internet at a workstation with XP pro. ... 1.go to ISA management, navigate to access policy ->site and content rules, ... content rule and small business server all users site and content rule. ... go to the workstation and perform the activation to see if it helps. ...
    (microsoft.public.windows.server.sbs)