Users who cannot be stripped from server administrator rights tend to forget that hell will break lose when they save database backups (
C: and fill the drive.
Is it possible to stop users who are server administrators from saving certain type of files in directories on
C:? They should still be allowed to save any other file types on
C:, and their rights over all other drives should remain unchanged.
If it is impossible to ban only certain file types, then is it possible to at least display a pop-up warning every time someone tries to save a
.bak file in certain directories on
For a variety of reasons, it is essential for these users to keep their server admin privileges.
I don't mind whether I'm using file level permissions, scripts, or GPOs. All solutions that work are welcome.