To deny a user from copying a file in Windows server file sharing to other sources, but allow that user to edit and read that file, you can use Share and NTFS permissions. Specifically, you can remove the user's Read and Execute permissions for the folder where the file is located, and then grant the user Modify permissions to the file itself. This will allow the user to edit and read the file, but not copy it to other locations.
Here are the steps to implement this:
- Right-click the folder where the file is located, click Properties, and then click the Security tab.
- In the Group or user names pane, click the user you want to restrict.
- Click to clear the Read & Execute check box for the user.
- Click OK.
- Right-click the file you want to allow the user to edit and read, click Properties, and then click the Security tab.
- In the Group or user names pane, click the user you want to allow.
- Click to select the Modify check box for the user.
- Click OK.
Note that this method only restricts the user from copying the file to other locations on the same server. If the user has access to other servers or storage devices, they may still be able to copy the file to those locations.
References: