I have users that have access to restricted areas (one NTFS volume) and also public areas (separate NTFS volume).
I have files that are in a restricted area. I also have users in the public areas that should never see the content that is restricted.
If the files were copied by accident from the restricted area to a public one (windows explorer, aka file explorer), the default behaviour is to inherit permissions. I want to force the ACL to be copied along with the file. That way, the file is still owned by the original user and group (and no one else). So public users wouldn't be able to read it.
I'm aware of xcopy and robocopy with appropriate flags, but I need to use windows explorer (aka file explorer).
I was hopeful when I found this article, specific to the registry DWORD entry named ForceCopyAclwithFile.
From my reading this is supposed to be implemented on the client side. I tried this on multiple windows 10 hosts and it doesn't seem to work. I also rebooted the Windows 10 clients.
Is this an old article that no longer works with current iterations of Windows 10?
Is the registry change supposed to be implemented on the windows file server and not the clients?
Is there a particular build of Windows 10 I need for this?
Or is there a hotfix I need to install?
Please advise if there is a different registry entry that will do the same thing.