To prevent unauthorized users from directly copying or deleting data files in the VSS shared folder, or cracking the super administrator password, you can configure the following on the VSS Server:
.
1. Make sure that the partition of the VSS directory is in the NTFS format.
2. Assume that VSS corresponds to the "X: \ Project Group name" directory on the server.
3. Create two subdirectories, for example:
X: \ Project Team name \ VSS
X: \ Project Team name \ vssdata
4. Move srcsafe. ini to "X: \ Project Group Name \ VSS"
Move the three directories data‑temp1_usersand users.txt to "X: \ Project Team name \ vssdata"
5. Share "X: \ Project Team name \ VSS" with "project team name", which can be read-only.
6. Share "X: \ Project Team name \ vssdata" with "project team name $" and set the following permissions on the "Security" Page:
1) "Full Control" will be allowed to be deselected
2) You will not select the option "allow propagation of inherited permissions from the parent line to this object ".
7. Set the "X: \ Project Group Name \ vssdata \ data \ labels" directory:
1) You will not select the option "allow propagation of inherited permissions from the parent line to this object ".
2) allows everyone read and write operations
8. Check the permission to modify the directory X: \ Project Group Name \ vssdata \ users. Otherwise, the error "file... already exists" is reported when VSS is disabled.
9. Set the "X: \ Project Group Name \ vssdata \ data" directory to "reject list folder directories" in the permission setting for everyone.
In this way, normal users cannot access the data directory that stores data.
10. Finally, open the srcsafe. ini file in the VSS directory and make the following changes:
Data_path = data to data_path = .. \ Project Group name $ \ data
Temp_path = temp to temp_path = .. \ Project Group name $ \ Temp
Change users_path = users to users_path = .. \ Project Team name $ \ Users
Change users_txt = users.txt to users_txt = .. \ Project Team name $ \ users.txt