T
TR-CPC
Remember how irritated we got with a warning every time we moved or copied a file? Well, now I want it back.
We currently have some Windows 2008 R2 terminal servers, some with sensitive data. We have clipboard enabled and drive redirection disabled. This allows users to copy code, report files, etc to and from the server while making it extremely unlikely that they would accidentally copy any files either way. Of course, my main concern is someone accidentally copying a sensitive file from the server to a redirected C drive mounted from the client.
Windows 2012 and up sort of combines clipboard and drive redirection, so it is no longer possible to enable clipboard without allowing drive redirection. I usually send users a preconfigured rdp file with drive redirection unchecked, so most people don't redirect their drives, but there's no way to prevent them from checking the box. I did some testing to see if I could run a script to disconnect any redirected drives (eg, net use /del \\tsclient\*), but I haven't found anything that works yet.
Any thoughts on how to either enable a warning for file copy between drives or automatically disconnect any \\tsclient drives? Thanks.
Continue reading...
We currently have some Windows 2008 R2 terminal servers, some with sensitive data. We have clipboard enabled and drive redirection disabled. This allows users to copy code, report files, etc to and from the server while making it extremely unlikely that they would accidentally copy any files either way. Of course, my main concern is someone accidentally copying a sensitive file from the server to a redirected C drive mounted from the client.
Windows 2012 and up sort of combines clipboard and drive redirection, so it is no longer possible to enable clipboard without allowing drive redirection. I usually send users a preconfigured rdp file with drive redirection unchecked, so most people don't redirect their drives, but there's no way to prevent them from checking the box. I did some testing to see if I could run a script to disconnect any redirected drives (eg, net use /del \\tsclient\*), but I haven't found anything that works yet.
Any thoughts on how to either enable a warning for file copy between drives or automatically disconnect any \\tsclient drives? Thanks.
Continue reading...