Azure Files(share snapshots) - Previous Versions Tab - disabling tab for all except administrators

Question

Azure Files(share snapshots) - Previous Versions Tab - disabling tab for all except administrators
https://learn.microsoft.com/en-us/azure/storage/files/storage-snapshots-files

I want to keep the functionality of Previous Versions shadowing however I only want administrators to be able to restore previous versions not users. Currently through the mapped drive, users have restore access through the previous versions tab and have restored the wrong versions. I want to lock down this option so that users must have an administrator do the restore. Is this possible?

I set a GPO, but it didn't hide "Previous Versions".
Please let me know if there is another way to hide "Previous Versions" in Azure Files.

Group Policy Object (GPO)
・USER CONFIGURATION > POLICIES > ADMINISTRATIVE TEMPLATES > WINDOWS COMPONENTS > FILE EXPLORER > PREVIOUS VERSIONS
・set Prevent Restoring Remote Previous Versions to ENABLED

Answer 1

@ys-7050 Thanks for reaching out to Microsoft Q&A.

I understand that you want to disable Previous Versions Tab for everyone except admins. You have already setup the same using GPO.

The GP should set the registry setting if the GP is applied. You can also try manually setting the registry setting: Previous Versions Tab - disabling tab for all except administrators

Also please note that the previous version tab is a Windows feature. Hope this helps.

Please let us know if you have any more questions and we will be glad to assist you further. Thank you!

Remember:

Please accept an answer if correct. Original posters help the community find answers faster by identifying the correct answer. Here is how.

Want a reminder to come back and check responses? Here is how to subscribe to a notification.

Answer 2

@ys-7050 Adding more information to the above response!

I don’t think or recommend disabling the feature is the best approach to solve the problem. You need a way for only power users/administrator to have share restore capability.

As I understand don’t want all users to have restore rights as it might affect other users and/or applications accessing the share if incorrect version is restored. This will again cause administrative overhead.

I need to understand the use-case better and see if we can accomplish this using GPO enhancements or RBAC. If editing the registry works, we can convert that as an UI option to accomplish the goal. I would also recommend you not change registry values directly as it might have unintended consequences and results.

Additional information: Azure Files doesn't provide this functionality. You can also share your feedback here. All the feedback you share in these forums will be monitored and reviewed by the Microsoft engineering teams responsible for building Azure

If you have any additional questions or need further clarification, please let me know.

----------

Please do not forget to and “up-vote” wherever the information provided helps you, this can be beneficial to other community members.