Hi Daniel, You are right on the second point. The only way (that I know of)to accomplish the requirement is to deny the users the permission to write to their hard drive. Windows 2000 does have a very granular security, unfortunately, the way it is setup, if you can read a file from a server, you can also copy it to your machine. --- As Andy explained, since I have no control over the users' machine, I am stuck unless I use a web base interface (see previous messages)--
One the first point, I am not so sure. My understanding is that content filtering does look inside the packets (application layer) and uses what it sees to filter traffic. Any firewall expert want to comment? Pierre-Alex -----Original Message----- From: Daniel Cotts [mailto:[EMAIL PROTECTED]] Sent: Monday, January 07, 2002 10:32 AM To: 'Pierre-Alex J. Guanel' Subject: RE: Permissions: read but don't copy [7:31128] Firewalls make decisions based on IP addresses and port numbers. So that doesn't look like a good candidate. I would think that W2K would have your solution. (I am in the dumb user category with MicroSoft). Cannot you set rights on files or folders? Is your problem that they can do either a copy or a "cut and paste" once they can read the file? Just thinking out loud - it would seem that their local machine would have to be severely restricted - as in a dumb terminal. > -----Original Message----- > From: Pierre-Alex J. Guanel [mailto:[EMAIL PROTECTED]] > Sent: Monday, January 07, 2002 6:19 AM > To: [EMAIL PROTECTED] > Subject: RE: Permissions: read but don't copy [7:31128] > > > Can a Cisco firewall do this? > > Pierre-Alex > > -----Original Message----- > From: Pierre-Alex J. Guanel [mailto:[EMAIL PROTECTED]] > Sent: Monday, January 07, 2002 6:07 AM > To: [EMAIL PROTECTED] > Subject: Permissions: read but don't copy > > > Hi all, > > I am running Windows 2000 Advanced Server. > > I would like to allow users (Windows 98 / Windows 2000 > Professional) to read > a file, > > but prevent them to copy it electronically to their desktop. > It looks like > Windows 2000 does not > > have the permissions to accomplish this. Has anyone done this before? > > Thanks, > > Pierre-Alex Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=31158&t=31128 -------------------------------------------------- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
