Files shared on the network will have different access rights depending on the sensitivity of the content. In some cases, you may need to allow read rights but restrict file copy actions. As a result, it is necessary to track and restrict unwarranted file copy actions to prevent data leaks from endpoints. DataSecurity Plus is a copy protection solution that can detect and stop files from being copied.
Steps to restrict file copy actions using DataSecurity Plus
To restrict file copy actions using DataSecurity Plus:
- Add computers to which you wish to apply the copy restriction policy to a group.
- Create a file copy policy with the type of restriction that you wish to enforce.
- Apply the policy to the group.
- Select Endpoint DLP from the application drop-down.
- Go to Configuration > Devices. In the Configured Workstation(s) page, you can choose to apply the policy for a single workstation or a group of workstations.
- To apply the policy for multiple workstations that are a part of a group, select the Configured Groups tab and click + Create Group located at the top-right corner.
- Provide a suitable Group Name and Group Description, and Select the Domain from the drop-down menu.
- Click + in the Select Workstation(s) field to add workstations.
- If you want to audit file copy events, select the File Copy Auditing policy from the existing list, and click Create Group.
- Under Prevention Policies, select File Copy Policy. Click + Create File Copy Policy in the top-right corner.
- Enter a suitable Policy Name and Policy Description.
- To restrict files being copied from the server, choose the appropriate response type under Network Copy.
- Choose the Block option if you want to disable file copy actions completely.
- Use the Prompt User option if you want to educate the users on the company's policies for copying sensitive data.
Note: The Prompt User option allows you to display a custom alert message to the user but doesn't stop the users from copying; users can either carry out the copy action or cancel it after they read this message.
- Enter the custom alert message in the text box shown below.
- By default, Enabled option is chosen from the Auditing drop-down menu.
- Click Save to save the policy.
- Click Policies on the left pane, and select the + Add Policy button in the top-right corner.
- Enter a suitable Policy Name and Policy Description.
- Add the endpoint group for which you want to apply the policy.
- Select the policy that you created under the Prevention Policies drop-down menu, and click Save.
The policy to restrict users from copying files from the server is now applied to the desired group of endpoints.
