Disable restore option for shadow copies SMB

[chuck32]

Hello,

is there a way to prevent users from using the restore option on smb shares?

From what I read it's best to open the snapshot and copy the file you need rather than restoring.

For security purposes I would like to ideally finetune the share in a way, that users may be able to browse snapshots and copy files from there, but they should not be able to click restore. I do not want someone to accidentally restore a folder or the toplevel of the shared dataset. Depeding on the snapshot retention policy I fear that may lead to data loss if not caught.

The shares are provided by a TrueNAS-SCALE-23.10.0.1 instance, the clients are all win 11 machines.

Thanks!

 

[chuck32]

This is the context menu in Windows for better understanding.

 

[anodos]

This is the context menu in Windows for better understanding.

That's something you control client-side via GPO.