Discussion:
Disable Volume Shadow Copy with Group Policy
(too old to reply)
Olivier
2007-09-21 13:16:02 UTC
Permalink
Dear all,

Currently every user in our organization has the right to restore files
using the volume shadow copy functionality. We want to restrict these rights
so that only the administrators group has this functionality. Can this be
done through Group Policy. If so, how?

Thanks in advance,

Olivier
Lanwench [MVP - Exchange]
2007-09-21 14:02:54 UTC
Permalink
Post by Olivier
Dear all,
Currently every user in our organization has the right to restore
files using the volume shadow copy functionality. We want to restrict
these rights so that only the administrators group has this
functionality. Can this be done through Group Policy. If so, how?
Thanks in advance,
Olivier
Do you want to deny them the ability to do *any* kind of activity with the
previous versions tab? Or just keep them from clicking Restore, which can
overwrite the "good" files of other users?

Most companies don't mind people having access to Previous Versions, as it
means users don't have to call the helpdesk for file restores. The users can
open/view the previous versions, and copy individual files where they like.
However, the "Restore" button can have serious and unexpectedly bad
consequences.

See the following:

http://support.microsoft.com/kb/888603 (you'll need to call for the hotfix)
and
http://www.jsifaq.com/SF/Tips/Tip.aspx?id=10906

If you don't want them to have *any* access to the previous versions tab,
simply uninstall the Volume Shadow Copy Client from the workstations.
However, I wouldn't, as I find it very useful.

Continue reading on narkive:
Loading...