Deny Copy, Delete, Print files in server 2012

Question

Hi,
We have Windows server 2012 acting as a DC & file server. We want to share a folder among the users and deny Copy, Delete, Print files. They shall only be able to view.

Can you kindly advise how to achieve that ( probably a step by step ).

Thanks in advance

Br
Reny

Answer 1

Hello,

Thank you so much for posting here.

To share a folder among the users with only view permission, we could try below:

Share this folder and then set the permission. We then add the users with only read permission so that the added users will only be able to view this folder. We could test to see whether it works.

For any question, please feel free to contact us.

Best regards,
Hannah Xiong

============================================

If the Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

Hi,
We followed the step, as suggested by you. Copy and Print is still possible. But DELETE and WRITE is not possible.

We want users to see ONLY open files and Read , but not COPY, Print and DELETE.
Br
Reny

Answer 3

Hello,

Thank you so much for your kindly reply.

Users who have Read permissions can copy and print files. So if they could read the file, they could also Copy and Print. There are no NTFS permissions to prevent copying or printing of a file.

Other solutions will be needed to meet our requirements. The discussions are as below:

https://social.technet.microsoft.com/Forums/ie/en-US/98935f9e-b8d0-4403-a509-bf3d292df741/restrict-copying-from-shared-folder?forum=winserversecurity

https://social.technet.microsoft.com/Forums/windowsserver/en-US/523d3a0f-b4c3-4e24-8766-17e26ee09ca4/preventing-users-from-copying-but-keeping-write-access?forum=winservergen

https://social.technet.microsoft.com/Forums/windows/en-US/00f2bee3-e989-4e4d-b590-20a889863780/how-to-prevent-copy-files?forum=winserverManagement

https://community.spiceworks.com/topic/1958865-how-to-deny-printing-on-shared-folder

Please note: Information posted in the given link is hosted by a third party. Microsoft does not guarantee the accuracy and effectiveness of information.

Best regards,
Hannah Xiong

============================================

If the Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 4

Hi,
Any idea with Active Directory Rights Management Services, we can achieve the same?
Br
Reny

Answer 5

Hi Reny,

Thank you so much for your kindly reply.

As mentioned in the link: https://learn.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/hh831364(v=ws.11)

"AD RMS can be used to augment the security strategy for your organization by protecting documents using information rights management (IRM).

AD RMS allows individuals and administrators through IRM policies to specify access permissions to documents, workbooks, and presentations. This helps prevent sensitive information from being printed, forwarded, or copied by unauthorized people. After permission for a file has been restricted by using IRM, the access and usage restrictions are enforced no matter where the information is, because the permission to a file is stored in the document file itself."

Hope the information is helpful. Thanks so much.

Best regards,
Hannah Xiong

============================================

If the Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.