Share via

How to prevent copying files from remote desktop session

Anonymous
2024-01-17T02:42:14+00:00

Hello, We have a Windows Server 2019 on a "WORKGROUP" not on Domain. I would like to prevent Users that remote desktop in to the server from Copying files both ways, from client to server and from server to client. I have tried using "Local Group Policy Editor" and enabled "do not allow clipboard redirection". This only disables from copying and pasting for example text(characters) not the file itself.

How do i prevent Users from copying Files on both direction? Any help is much appreciated. Thanks.

Windows for business | Windows Server | User experience | Remote desktop services and terminal services

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question. To protect privacy, user profiles for migrated questions are anonymized.

0 comments

2 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Anonymous
    2024-01-18T02:04:11+00:00

    Hello    JCM_738，

    Thank you for posting in Microsoft Community forum.

    One way to prevent users from copying files from a remote desktop session is to disable drive redirection. This can be done by following these steps:

    1. Open the Local Group Policy Editor by typing "gpedit.msc" in the Run dialog box (press Windows key + R to open the Run dialog box).
    2. Navigate to Computer Configuration > Administrative Templates > Windows Components > Remote Desktop Services > Remote Desktop Session Host > Device and Resource Redirection.
    3. Double-click the "Do not allow drive redirection" policy setting.
    4. Select "Enabled" and click "OK".

    This will prevent users from accessing their local drives from the remote desktop session, and thus prevent them from copying files to or from the remote desktop session. Note that this will also prevent users from accessing any other resources that are redirected, such as printers or USB devices.

    Another way to prevent file copying is to restrict user permissions on the server. You can create a new user group and remove the "Read & Execute", "List Folder Contents", and "Read" permissions for that group on the folders you want to protect. This will prevent users from accessing those folders and copying files from them.

    I hope the information above is helpful.

    If you have any question or concern, please feel free to let us know.

    Best Regards,

    Haijian Shan

    3 people found this answer helpful.
    0 comments
  2. Anonymous
    2024-09-14T09:16:41+00:00

    Hello    JCM_738，

     

    Thank you for posting in Microsoft Community forum.

     

    One way to prevent users from copying files from a remote desktop session is to disable drive redirection. This can be done by following these steps:

    1. Open the Local Group Policy Editor by typing "gpedit.msc" in the Run dialog box (press Windows key + R to open the Run dialog box).
    2. Navigate to Computer Configuration > Administrative Templates > Windows Components > Remote Desktop Services > Remote Desktop Session Host > Device and Resource Redirection.
    3. Double-click the "Do not allow drive redirection" policy setting.
    4. Select "Enabled" and click "OK".

    This will prevent users from accessing their local drives from the remote desktop session, and thus prevent them from copying files to or from the remote desktop session. Note that this will also prevent users from accessing any other resources that are redirected, such as printers or USB devices.

    Another way to prevent file copying is to restrict user permissions on the server. You can create a new user group and remove the "Read & Execute", "List Folder Contents", and "Read" permissions for that group on the folders you want to protect. This will prevent users from accessing those folders and copying files from them.

    I hope the information above is helpful.

     

    If you have any question or concern, please feel free to let us know.

     

    Best Regards,

    Haijian Shan

    Hi Hajian,

    Thanks for this I was searching for solution to a similar problem. I want to let a remote user RDP in to his enterprise domain joined PC and use the files in network folder on the domain controller AD server. From what I understand the setting you suggested is to be applied to his own PC and not the domain controller. What if I want to instead control it through the GPO in Domain Controller?

    0 comments