Ask a questionAsk a question
 

AnswerIs it possible to forbid users saving remote documents?

  • Thursday, June 04, 2009 9:48 AMXiaofeng WangMVPUsers MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    Hello,

    Today my boss ask me if it is possible to forbid users saving remote documents including Word, Excel, PPT, PDF. 
    Because he's happy to share the documents for authenticated users to read online but very unhappy if they save these document as a local copy.

    So anyone have ever got this kind of boss and give him a flexible solution?

    Thanks a lot :)


    Xiaofeng Wang | MVP(ASP/ASP.NET) | Beijing P.R.C

Answers

  • Thursday, June 04, 2009 11:38 AMJamie McAllister Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     Answer
    Information Rights Management;


    It's the most secure solution you're likely to find but it is not easy to implement!!

    I advised a questioner on Experts Exchange about this a while back. Should you decide on the IRM route these selective excerpts from that thread might help;


    "Before IRM can be enabled for lists and libraries, the Microsoft Windows Rights Management Services (RMS) Client with Service Pack 2 must be installed on every front-end Web server for your SharePoint site. In addition, Information Rights Management needs to be enabled in Central Administration for your site. Additionally, a server administrator must install protectors on all front-end Web servers for every file type that the people in your organization want to protect by using IRM."


    First of all, installing anything like this you need to back up your environment. Not just the Content Database, but your whole server. This is something you should have available to you for when you install Service Packs etc. 

    You can then obtain the RMS client from here;
    http://support.microsoft.com/default.aspx/kb/917275.

    IRM Protectors, there's some info here which you need to read carefully. Didn't find any info about pre-made Protectors I'm afraid;
    http://msdn.microsoft.com/en-us/library/ms439253.aspx
    http://msdn.microsoft.com/en-us/library/ms436515.aspx

    To code Protectors you will need someone who understands C. You are not going to like what you see in this post ;

    http://social.msdn.microsoft.com/Forums/en-US/sharepointecm/thread/302f7aad-f9d3-4f48-9484-5b5ad9fa1ec2/

    Blog; http://www.the-north.com/sharepoint --- Posting is provided "AS IS" with no warranties, and confers no rights.

All Replies

  • Thursday, June 04, 2009 9:52 AMMike Walsh MVPMVP, ModeratorUsers MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    Not a SP function.

    You need something like Rights Management Services.

    (But even they might not block Copy/Paste)

    WSS FAQ sites: http://wssv2faq.mindsharp.com and http://wssv3faq.mindsharp.com
    Total list of WSS 3.0 / MOSS 2007 Books (including foreign language) http://wssv3faq.mindsharp.com/Lists/v3%20WSS%20FAQ/V%20Books.aspx
  • Thursday, June 04, 2009 9:57 AMXiaofeng WangMVPUsers MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    Hi Mike,

    Yes, it's a common question not special to SP.  But I right have SP as our document center. 

    I post here because I guess some SP guys may have got this same reqirement before. 

    And, what do you mean about Rights Management Services? Thanks.

    Xiaofeng Wang | MVP(ASP/ASP.NET) | Beijing P.R.C
  • Thursday, June 04, 2009 10:10 AMMike Walsh MVPMVP, ModeratorUsers MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    There's a Microsoft product called "Rights Management Server". You should be able to Google (or Bing!) it.
    WSS FAQ sites: http://wssv2faq.mindsharp.com and http://wssv3faq.mindsharp.com
    Total list of WSS 3.0 / MOSS 2007 Books (including foreign language) http://wssv3faq.mindsharp.com/Lists/v3%20WSS%20FAQ/V%20Books.aspx
  • Thursday, June 04, 2009 11:38 AMJamie McAllister Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     Answer
    Information Rights Management;


    It's the most secure solution you're likely to find but it is not easy to implement!!

    I advised a questioner on Experts Exchange about this a while back. Should you decide on the IRM route these selective excerpts from that thread might help;


    "Before IRM can be enabled for lists and libraries, the Microsoft Windows Rights Management Services (RMS) Client with Service Pack 2 must be installed on every front-end Web server for your SharePoint site. In addition, Information Rights Management needs to be enabled in Central Administration for your site. Additionally, a server administrator must install protectors on all front-end Web servers for every file type that the people in your organization want to protect by using IRM."


    First of all, installing anything like this you need to back up your environment. Not just the Content Database, but your whole server. This is something you should have available to you for when you install Service Packs etc. 

    You can then obtain the RMS client from here;
    http://support.microsoft.com/default.aspx/kb/917275.

    IRM Protectors, there's some info here which you need to read carefully. Didn't find any info about pre-made Protectors I'm afraid;
    http://msdn.microsoft.com/en-us/library/ms439253.aspx
    http://msdn.microsoft.com/en-us/library/ms436515.aspx

    To code Protectors you will need someone who understands C. You are not going to like what you see in this post ;

    http://social.msdn.microsoft.com/Forums/en-US/sharepointecm/thread/302f7aad-f9d3-4f48-9484-5b5ad9fa1ec2/

    Blog; http://www.the-north.com/sharepoint --- Posting is provided "AS IS" with no warranties, and confers no rights.
  • Friday, June 05, 2009 2:55 AMXiaofeng WangMVPUsers MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    Thanks Jamie. It seems RMS is a good choice worthy of my trying. But I guess RMS is not available for non-ms-office documents. PDF has a built-in encryption.
    Other sorts of documents should need to seek special solution.

    Xiaofeng Wang | MVP(ASP/ASP.NET) | Beijing P.R.C
  • Friday, June 05, 2009 12:28 PMJamie McAllister Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    Here is an example product that extends the range of protected document types for RMS:




    Blog; http://www.the-north.com/sharepoint --- Posting is provided "AS IS" with no warranties, and confers no rights.