Enhanced file sharing security for VSS

Source: Internet
Author: User

To prevent unauthorized users from directly copying or deleting data files in the VSS shared folder, or cracking the super administrator password, you can configure the following on the VSS Server:

.

1. Make sure that the partition of the VSS directory is in the NTFS format.
2. Assume that VSS corresponds to the "X: \ Project Group name" directory on the server.
3. Create two subdirectories, for example:
X: \ Project Team name \ VSS
X: \ Project Team name \ vssdata
4. Move srcsafe. ini to "X: \ Project Group Name \ VSS"
Move the three directories data‑temp1_usersand users.txt to "X: \ Project Team name \ vssdata"

5. Share "X: \ Project Team name \ VSS" with "project team name", which can be read-only.
6. Share "X: \ Project Team name \ vssdata" with "project team name $" and set the following permissions on the "Security" Page:
1) "Full Control" will be allowed to be deselected
2) You will not select the option "allow propagation of inherited permissions from the parent line to this object ".
7. Set the "X: \ Project Group Name \ vssdata \ data \ labels" directory:
1) You will not select the option "allow propagation of inherited permissions from the parent line to this object ".
2) allows everyone read and write operations
8. Check the permission to modify the directory X: \ Project Group Name \ vssdata \ users. Otherwise, the error "file... already exists" is reported when VSS is disabled.
9. Set the "X: \ Project Group Name \ vssdata \ data" directory to "reject list folder directories" in the permission setting for everyone.
In this way, normal users cannot access the data directory that stores data.
10. Finally, open the srcsafe. ini file in the VSS directory and make the following changes:
Data_path = data to data_path = .. \ Project Group name $ \ data
Temp_path = temp to temp_path = .. \ Project Group name $ \ Temp
Change users_path = users to users_path = .. \ Project Team name $ \ Users
Change users_txt = users.txt to users_txt = .. \ Project Team name $ \ users.txt

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.