Access Control List (ACL)?
Is there any way to prohibit file/folder copying by users in Windows XP?
Thanks,
Mehran
Update:Further details:
I would like to prvent copying on the same computer, including copying on a CD/USB drive. Basically, the purpose is: "not files leaves this room!" This is for medical records, and they should not leave the MR room.
Thanks,
Mehran
Comments
Yes, is a way to disable the file sharing abilities of Windows XP with an ACL.
I wouldn't recommend this method because it is totally impractical. In order for the ACL to be successful you would need to implement it on every port of a switch or router that connects directly to a PC. This requires lots of administration and many generic switches do no support it.
File Sharing in Windows XP uses TCP port 445. The protocol is SMB(Server Message Block). This information is all the is needed to create an ACL to prevent file sharing with Windows XP computers. However, you would need to place this ACL between all computers that you want to limit the file sharing abilities, which is why I say this is impractical.
If you are trying to limit the file sharing completely the simplest solution is to turn off file sharing in Windows XP. This can be done by following the instructions in my second source link.
If you want to enable file sharing for some computers, and not for others, instead of implementing many ACL's on many router/switch ports, I would create users that have permission to access certain shares on certain computers. This way, you can access the shares you want without others being able to access them without your permission.
Good Luck
If you are talking about a single computer than you will need to set up seperate local accounts so users log on individually. Then once in your account you can right click on files and folders, go to properties, and set the rights for users there. You can also encrypt folders from there.