I work in an SBS2000 environment with 2 additional servers acting as
Terminal Servers. My primary duty is database programming but the owner
looks to me for Networking help (very small business - 15 users). He
recently asked me if there is a way to stop users from copying software from
the file server to their local PC. This is primarily for remote users who
connect from home via VPN.
The user would still need the ability to run applications and modify data,
but the owner wants to ensure that those users working from home do not copy
software and data files from the server to their home PC.

Not being a network/security expert, I thought I'd post the question to the
experts on SBS2000. I am somewhat familiar with SBS2000 (a little knowledge
can be dangerous!).

If someone can point me in the right direction, I'd greatly appreciate it.

Thank you,
Thomas J. Kroljic

Re: Security by Lanwench

Lanwench
Fri Jun 18 08:54:43 CDT 2004

Thomas Kroljic wrote:
> I work in an SBS2000 environment with 2 additional servers acting as
> Terminal Servers. My primary duty is database programming but the
> owner looks to me for Networking help (very small business - 15
> users). He recently asked me if there is a way to stop users from
> copying software from the file server to their local PC. This is
> primarily for remote users who connect from home via VPN.
> The user would still need the ability to run applications and modify
> data, but the owner wants to ensure that those users working from
> home do not copy software and data files from the server to their
> home PC.

Not really possible unless you use only Terminal Services for them, as far
as I can imagine.
>
> Not being a network/security expert, I thought I'd post the question
> to the experts on SBS2000. I am somewhat familiar with SBS2000 (a
> little knowledge can be dangerous!).
>
> If someone can point me in the right direction, I'd greatly
> appreciate it.
>
> Thank you,
> Thomas J. Kroljic



Re: Security by Thomas

Thomas
Fri Jun 18 10:25:22 CDT 2004

Lanwench
What do you mean "if they only use Terminal Services"?

Currently, all remote users log into the Terminal Services to run
applications (Access Databases, Quickbooks...). There are a couple of
subdirectories on the TS machine that are setup as "shared".

Is there a way to stop them from copying data files and executables from the
TS box to their local PC?

Thank you,
Thomas J. Kroljic

"Lanwench [MVP - Exchange]"
<lanwench@heybuddy.donotsendme.unsolicitedmail.atyahoo.com> wrote in message
news:uGxs%231TVEHA.2944@tk2msftngp13.phx.gbl...
> Thomas Kroljic wrote:
> > I work in an SBS2000 environment with 2 additional servers acting as
> > Terminal Servers. My primary duty is database programming but the
> > owner looks to me for Networking help (very small business - 15
> > users). He recently asked me if there is a way to stop users from
> > copying software from the file server to their local PC. This is
> > primarily for remote users who connect from home via VPN.
> > The user would still need the ability to run applications and modify
> > data, but the owner wants to ensure that those users working from
> > home do not copy software and data files from the server to their
> > home PC.
>
> Not really possible unless you use only Terminal Services for them, as far
> as I can imagine.
> >
> > Not being a network/security expert, I thought I'd post the question
> > to the experts on SBS2000. I am somewhat familiar with SBS2000 (a
> > little knowledge can be dangerous!).
> >
> > If someone can point me in the right direction, I'd greatly
> > appreciate it.
> >
> > Thank you,
> > Thomas J. Kroljic
>
>



Re: Security by Lanwench

Lanwench
Fri Jun 18 10:44:17 CDT 2004

Thomas Kroljic wrote:
> Lanwench
> What do you mean "if they only use Terminal Services"?
>
> Currently, all remote users log into the Terminal Services to run
> applications (Access Databases, Quickbooks...). There are a couple of
> subdirectories on the TS machine that are setup as "shared".

>
> Is there a way to stop them from copying data files and executables
> from the TS box to their local PC?

If you don't use RDPCLip they can't do this now as it is, as far as I know.
Local drive redirection isn't available in TS for W2000. If they have a mail
client on the TS box they could email themselves whatever they want, note...

>
> Thank you,
> Thomas J. Kroljic
>
> "Lanwench [MVP - Exchange]"
> <lanwench@heybuddy.donotsendme.unsolicitedmail.atyahoo.com> wrote in
> message news:uGxs%231TVEHA.2944@tk2msftngp13.phx.gbl...
>> Thomas Kroljic wrote:
>>> I work in an SBS2000 environment with 2 additional servers acting as
>>> Terminal Servers. My primary duty is database programming but the
>>> owner looks to me for Networking help (very small business - 15
>>> users). He recently asked me if there is a way to stop users from
>>> copying software from the file server to their local PC. This is
>>> primarily for remote users who connect from home via VPN.
>>> The user would still need the ability to run applications and modify
>>> data, but the owner wants to ensure that those users working from
>>> home do not copy software and data files from the server to their
>>> home PC.
>>
>> Not really possible unless you use only Terminal Services for them,
>> as far as I can imagine.
>>>
>>> Not being a network/security expert, I thought I'd post the question
>>> to the experts on SBS2000. I am somewhat familiar with SBS2000 (a
>>> little knowledge can be dangerous!).
>>>
>>> If someone can point me in the right direction, I'd greatly
>>> appreciate it.
>>>
>>> Thank you,
>>> Thomas J. Kroljic