Hi All, We are currently using Server 2008 with Shadow Copy Service. As I understand it, if an administrator and a regular user have access to the folder "Share", then either of them can view previous versions of Share and restore Share to any previous state. Is there a way that we can prevent regular users from accessing previous versions and restoring Share, leaving these functions only available to administrators? Thanks in advance.

The User only been able to restore a demo earlier if they have permission to write to the current file.If useful, sort.Se til, classifique. Matheus M. Bertuco MCT, MCSA, MCTS, MCP.

Sorry, I should have been more specific. "Share" is a public drive. Users need to be able to write to this drive, but they should not be able to restore previous versions of files.

Anyone have any ideas?

Hi Easton IT,what do you mean by restore previous version of files ?When you write to the file and save it , you cannot restore it , unless you copy and paste the older version of file into the share.

Hi Easton IT, what do you mean by restore previous version of files ? When you write to the file and save it , you cannot restore it , unless you copy and paste the older version of file into the share. Thanks for the reply. When you go to the properties of a shared folder and then to the previous versions tab, we can restore the previous versions of that folder. We need to disable this for certain users, but they should still have access to write to the folder.

Hi Easton IT, what do you mean by restore previous version of files ? When you write to the file and save it , you cannot restore it , unless you copy and paste the older version of file into the share. You shouldn't be allowed to mark your own answer as correct. Especially when you haven't put a reasonable effort into answering it!!! Your answer has no value here, it literally tells us nothing. As a moderator don't you think you should put more effort into your answers? In my environment we removed the restore button from being available, set it to greyed out. We do this at login via script for every user, then later on open if up if needed for those who need it. But we just don't want people using Shadow Copy to "Restore". "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer" "NoPreviousVersionsRestore" "1" I haven't seen a way for us to remove the user's ability to copy and paste out of Previous Versions, but you can remove them from using the tab by the following registry key. "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer" "NoPreviousVersionsPage" "1" For users you want to have Previous Versions, register twext.dll. regsvr32 /s %windir%\system32\twext.dll This definitely does not prevent the users from having permissions to the Previous Versions, that has to do with NTFS and I don't see an easy way to prevent them from viewing the versions, so we just remove the vehicle to see the versions period. Hopefully this helps someone out in the future.

Hey Easton IT, I realize this is way late, but I just wanted to throw this your way, you may or may not be struggling with this still. In my environment we removed the restore button from being available, set it to greyed out. We do this at login via script for every user, then later on open if up if needed for those who need it. But we just don't want people using Shadow Copy to "Restore". "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer" "NoPreviousVersionsRestore" "1" I haven't seen a way for us to remove the user's ability to copy and paste out of Previous Versions, but you can remove them from using the tab by the following registry key. "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer" "NoPreviousVersionsPage" "1" For users you want to have Previous Versions, register twext.dll. regsvr32 /s %windir%\system32\twext.dll This definitely does not prevent the users from having permissions to the Previous Versions, that has to do with NTFS and I don't see an easy way to prevent them from viewing the versions, so we just remove the vehicle to see the versions period.

Thank you Tbone. I was looking for this. The Moderator is wacked, Im glad I kept scrolling down.

Thanks for the answer. Do you know if there is a way to do this through group policy without changing registry keys?

Thanks for the answer. Do you know if there is a way to do this through group policy without changing registry keys? You can achieve this by GPO but have to use registry keys specified above. Computer Configuration >> Preferences >> Registry and then click new Registry wizard and reach to those keys and apply. P.S. Sorry, I accidentally clicked propose as answer initially instead of Quotebutton. This posting is provided "AS IS" with no warranties or guarantees and confers no rights. Most of the downtime's are caused because of SysAdmin's curiosity ! - Santosh