LITTLEBLACKDOG.COM Forum Index LITTLEBLACKDOG.COM

 
LWD LWD   FAQ FAQ   Memberlist Memberlist   Usergroups Usergroups   Active Topics Active Topics   Register Register  
  Profile Profile   Log in to check your private messages Log in to check your private messages   Log in Log in  
  Who is Online Who is Online   Image Gallery Image Gallery   Chat Chat   Search Search  
  LWDGear       LBDGear  

View next topic
View previous topic
Post new topic     Reply to topic   LITTLEBLACKDOG.COM Forum Index » Networking
Author Message
spark rain fire
Tail-Wagger
Tail-Wagger


Joined: 10 Aug 2003
Age: 25
Posts: 2202

Post Posted: Sat Nov 15, 2003 7:22 am   Post subject: xp pro security features Reply with quote Back to top  

is there a way to stop people on the network from copying files on to their hard drives?

right now i only am allowing one PC on the network to view my music/vidoes (the "Media Center" PC) however, my roomates could still leech my shit. they could take the files from my pc, put on the media pc, then from there over to their computers.


i know it sounds kind-of rediculous, and almost impossible to allow read, but not copy.

but i thought it was worth a try.

i'm running windows xp pro.

_________________
i have page 48
View user's profile Send private message Send e-mail AIM Address
scarecrow
Big Dog
Big Dog


Joined: 04 May 2001
Posts: 3456
Location: Portland, Oregon

Post Posted: Sat Nov 15, 2003 7:35 am   Post subject: Reply with quote Back to top  

What format is you HD? If it is NTFS you could lock it down with permissions.

_________________
View user's profile Send private message Visit poster's website AIM Address Yahoo Messenger MSN Messenger ICQ Number
spark rain fire
Tail-Wagger
Tail-Wagger


Joined: 10 Aug 2003
Age: 25
Posts: 2202

Post Posted: Sat Nov 15, 2003 7:44 am   Post subject: Reply with quote Back to top  

scarecrow wrote:
What format is you HD? If it is NTFS you could lock it down with permissions.


yes, its NTFS. but i cant figure out how to set up permissions to work that way.

_________________
i have page 48
View user's profile Send private message Send e-mail AIM Address
T
Curmudgeon


Joined: 17 May 2001
Posts: 16140
Location: Airstrip One

Post Posted: Sat Nov 15, 2003 9:38 am   Post subject: Reply with quote Back to top  

Can't be done. If someone can read it they can make a copy of it.

_________________
Got questions? Click here.
Still got questions? Click here, too.

affabletoaster, Akely, anglachel, blahpony, CMTG, EdisonRex, Elk, Equin, evilness, Fido, fathertyme, Goddess, Jaymac, je, jodygirl, KingKobra, Lycander, mally, Max, OhioArt2, perrito_blanco, Rover, Spot, sully_51, Superdwarf, the taz man, thriftyjack, twiztid, wrathiron, yiayia49

Would you like
good music at a price that is right? CD Baby, baby.

"Leverage" and "text" are nouns, not verbs.
View user's profile Send private message Visit poster's website
csign
Moderator
Moderator


Joined: 26 May 2001
Posts: 8155
Location: Borneo

Post Posted: Sat Nov 15, 2003 10:22 am   Post subject: Reply with quote Back to top  

you could inflate the mp3 to wav and let them read that. But Demon is right
View user's profile Send private message Send e-mail
Extreme
Big Dog
Big Dog


Joined: 17 Jun 2001
Age: 28
Posts: 4393
Location: Palm Bay, Florida USA

Post Posted: Sat Nov 15, 2003 10:56 am   Post subject: Reply with quote Back to top  

Are you using the HTPC software to access the network share directly?

If so you could do the following:
1. Set permissions on your computer to allow only yourself (And whoever else may need access to them locally), then allow a universal ID for the HTPC software
2. Use the "RunAs" Command for the software

This may work....but if it doesnt, post what media software your using, how they get the files from your comp, and all the other good details Smile

_________________
I ♥ my IT guy, do you?
View user's profile Send private message Send e-mail Visit poster's website AIM Address ICQ Number
scarecrow
Big Dog
Big Dog


Joined: 04 May 2001
Posts: 3456
Location: Portland, Oregon

Post Posted: Sat Nov 15, 2003 11:04 am   Post subject: Reply with quote Back to top  

Sorry must have misread your post there

_________________
View user's profile Send private message Visit poster's website AIM Address Yahoo Messenger MSN Messenger ICQ Number
spark rain fire
Tail-Wagger
Tail-Wagger


Joined: 10 Aug 2003
Age: 25
Posts: 2202

Post Posted: Sat Nov 15, 2003 7:11 pm   Post subject: Reply with quote Back to top  

i'm using myHTPC. and i kind-of figured that if you can read, then you can copy.

i was just hoping that there was some way to do it.

right now i'm just not sharing the folder, and when i want to go to the media pc, i'll share it.

that seems like the only fail proof method.

_________________
i have page 48
View user's profile Send private message Send e-mail AIM Address
Extreme
Big Dog
Big Dog


Joined: 17 Jun 2001
Age: 28
Posts: 4393
Location: Palm Bay, Florida USA

Post Posted: Sat Nov 15, 2003 8:14 pm   Post subject: Reply with quote Back to top  

spark rain fire wrote:
i'm using myHTPC. and i kind-of figured that if you can read, then you can copy.

i was just hoping that there was some way to do it.

right now i'm just not sharing the folder, and when i want to go to the media pc, i'll share it.

that seems like the only fail proof method.


Ok, Setting permissions and using the RunAs command for myHTPC don't appear to work, but there are the following alternatives:

1. Use Administrative Shares. Don't share the folder at all, instead just check to see if the admin share is on. E.G. C:\Music that is normally shared as \\computername\music can now be shared as \\computername\c$\music.

This will allow you to log on to your username at the media PC, map a drive to the needed folders and they will authenticate using your user id/password on the remote machine.

Downsides: Everyone you want to give access to these files will need to have admin priveldges on your machine.

2. although I have not tried the following, you can give it a shot. Use the local computer policy to block access to the computer from the network. You can do this via the following:
2A. Go to start -> Run and type in MMC
2B. Go to File - > Add/Remove Snap-in -> Click on Add -> Select Group Policy -> Click on Add -> Group Policy Object = Local Computer - > Click on Finish
2C. Click on Close -> Click on OK
2D. Navigate to the following location in the group policy: Console Root\Local Computer Policy\Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignment
2E. In this location, select "Access this computer from the network", change this to the allowed usernames to access this computer over a network (Your Username(s)).

This should idealy prevent access to the computer over a network with the exception of the user names/groups you specify.

The only other portion to lock would be the following scenario: I am at the media PC and copy the file to the media PC, then copy it to my computer (Because I figured out I cant access the media PC over the network), or I copy directly from your pc, to my PC. This would be harder to enforce....but the above suggestion may help in the meantime until other alternatives are found (Such as shelling out to myhtpc, and really locking down the media pc)

_________________
I ♥ my IT guy, do you?
View user's profile Send private message Send e-mail Visit poster's website AIM Address ICQ Number
tecgod13
Tail-Wagger
Tail-Wagger


Joined: 13 Aug 2002
Posts: 2865
Location: Western Massachusetts

Post Posted: Sat Nov 15, 2003 9:02 pm   Post subject: Reply with quote Back to top  

I'm assuming this media PC is yours right? So why can't you shut off network sharing on the media PC so your friends can't leach from it? Then it wouldn't do them any good to leach stuff from your puter to the media PC cuz they couldn't get it from there.

Also, if this is a problem, could you not password the media PC so they can't use it? Or limit their access to only stuff locally on the media PC not the network resources?

_________________
"The problem with America is stupidity. I'm not saying there should be a capital punishment for stupidity, but why don't we just take the safety labels off of everything and let the problem solve itself?"
http://www.livejournal.com/users/tecgod13/
View user's profile Send private message Send e-mail
BamZipPow
Alpha Dog
Alpha Dog


Joined: 02 Aug 2001
Posts: 17974
Location: Driving EEp all over the place...

Post Posted: Sat Nov 15, 2003 10:00 pm   Post subject: Reply with quote Back to top  

If you want them to just listen to stuff without copying...couldn't you just stream yer stuff? Wink SmileBig SmileEvil Smile

_________________
BamZipPow
...all yer EEps belong to Bam!

View user's profile Send private message Send e-mail AIM Address ICQ Number
spark rain fire
Tail-Wagger
Tail-Wagger


Joined: 10 Aug 2003
Age: 25
Posts: 2202

Post Posted: Sun Nov 16, 2003 12:42 pm   Post subject: Reply with quote Back to top  

tecgod13 wrote:
I'm assuming this media PC is yours right? So why can't you shut off network sharing on the media PC so your friends can't leach from it? Then it wouldn't do them any good to leach stuff from your puter to the media PC cuz they couldn't get it from there.

Also, if this is a problem, could you not password the media PC so they can't use it? Or limit their access to only stuff locally on the media PC not the network resources?


the media pc is for 'everyone' thats why i have to get my personal files from the network. my current method of not sharing my folders, then sharing them when i go to the living room seems to be working alright.

_________________
i have page 48
View user's profile Send private message Send e-mail AIM Address
spark rain fire
Tail-Wagger
Tail-Wagger


Joined: 10 Aug 2003
Age: 25
Posts: 2202

Post Posted: Sun Nov 16, 2003 12:43 pm   Post subject: Reply with quote Back to top  

BamZipPow wrote:
If you want them to just listen to stuff without copying...couldn't you just stream yer stuff? Wink SmileBig SmileEvil Smile


i have no knowledge in this area

_________________
i have page 48
View user's profile Send private message Send e-mail AIM Address
Display posts from previous:   
Post new topic     Reply to topic

View next topic
View previous topic
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum


Powered by phpBB © 2001, 2002 phpBB Group
phpBB SEO
All times are GMT - 8 Hours

Help us keep advertisements off this site. Donate today!