Controlling access to \\servername\c$

[hoote03]

Can PAM Server Control can stop access to \\servername\c$. I haven’t talked to the customer yet but I assume that they are Domain Admins that have this unwanted access.

 

Thank you,

[Brian Rehder]

Hello,

 

It is possible to restrict access to files on a network drive as long as PAMSC is installed on the server. For example, if you have a file rule for "C:\test.txt" on server TESTSERVER and try to access \\TESTSERVER\c$\test.txt, the file rule will take effect. It is not advised to write a file rule for a whole drive as it would cause performance issues on the drive since PAMSC will audit every interaction with every file on the server. Additionally, writing a rule for C:\ improperly could cause issues with internal Windows components. If the customer wishes to restrict access to network drives, it is suggested that they use Windows domain rules.

 

Kind Regards,

Brian Rehder

CA Support Engineer