GPO: disable access to previous versions

Introduction

In this tutorial, I’ll explain how to disable access to previous versions by GPO from client computers. Although convenient, this feature in case of user error can do some damage.

As a reminder, in normal operation, access to previous versions is available by right-clicking on the folder.

Shadow copy

The GPO I am going to mount you will disable access to previous versions on the networks location.

GPO: Disabling Access to Previous Versions

1. From the Group Policy Management console, right-click on the OU 1 that contains the items and click Create GPO in this area, and link it here 2 .
New strategy

2. Name strategy 1 and click OK 2 .
Strategy name

3. Create the strategy, right click on 1 and click on Edit 2 .
Edit strategy

4. Go to Location: Computer Configuration / Administrative Template / File Explorer / Previous Version 1 . Open the Hide Previous Versions List for Remote Files 2 setting.
Parameters

5. Activate 1 the parameter then click on Apply 2 and OK 3 .
Parameters

This setting allows you to disable access to previous versions on the folder, this prevents users from doing the restores themselves. If you want to leave the users autonomous, it is advisable in this case to enable the Prevent the restoration of previous remote versions.

6. Summary of the strategy:
Resume

7. Result: The Previous Versions tab is no longer available.
Result

Conclusion

Limiting access to previous versions for users should be applied, by experience once the user sees the manipulation, he will attempt to reproduce it by himself when he needs a file restore, and a false manipulation with previous versions can either restore the data set to T moment, saturate the disk space of the share …

 

 


How useful was this post?

Click on a star to rate it!

Average rating / 5. Vote count:

We are sorry that this post was not useful for you!

Let us improve this post!



Related Posts


Enable Windows Active Directory Recycle Bin 2012/2016/2019
Introduction The Active Directory Recycle Bin is a feature that came with Windows 2008R2, which is disabled by default. To activate the recycle bin, the domain and drill level must be at least 2008R2. Once the trash is activated, it is not possible t

Printer mapping: GPO and Script
When setting up an Active Directory, one of the things you want to set up automatically is the printer mapping to the different users. Before setting up GPOs, you must have shared your printers. As for mapping network drives, I'll introduce you to tw

GPO: Run a script when the computer starts
Presentation In this article, we will see how to set up a script that runs at startup of the post using Group Policy (GPO). The advantage of using this type of script is that it is executed with the Administrators rights, which makes it possible to l

Leave a Comment