Creating View Only Network Group Policies Without Third Party Software

Question

Hi Gang,

Windows Server 2016, Standard.

I currently have a series of read-only folders on our network with variable user permission based on job roles.

But, I want to make a new folder, drive, or location which is read-only, but also view-only. Is there a function for this within the Windows Server umbrella, or must I use a third party software (which, for a variety of reasons, I'm averse to). The context is that we have a document library (mostly PDF) which is bound by intellectual property agreements, but there should be visibility to all staff but not the ability to move, edit, save, etc...

Would appreciate any inputs.

Thanks,

Brett

Answer 1

Hi BrettShinn-0420,

A read-only file would not prevent the user from changing its location, just the contents. But when you move a file to another location (directory), you need the rights to put a file there (ie essentially create a file in the directory). There is no native user or file permission in windows that locks files into a particular directory and prevents them from being copied. You could try using NTFS permissions on the folder in order to prevent files from being copied?

https://learn.microsoft.com/en-us/troubleshoot/windows-client/windows-security/permissions-on-copying-moving-files

I hope this answers your question.

---------------------------------------------------------------------------------------------------------------------------

--If the reply is helpful, please Upvote and Accept as answer--