Can access to shadow copies be restricted?

[GavenRay]

I would like to lock down access to shadow copies (previous versions) so that typical users cannot access them. I can think of two strategies to accomplish this.1. Block network access to shadow copies. Shadow copies can only be accessed from the server itself, not over file shares.2. Restrict access to shadow copies to server administrators.Please note: while I can modify the policy on the server with gpedit.msc, I do not have any control over GPO from Active Directory so I can't push any settings to clients.

Continue reading...