Suppress *.tmp creation


  1. Posts : 24
    Windows Server 2016 Datacenter x64 [build 14393.5501]
       #1

    Suppress *.tmp creation


    I have a very restrictive permission system on my external hard drive, for security reasons (and because the files on the drive are very valuable (to me at least), scientific journal articles amongst other things) I have it set so that:
    • only one user (an admin, which has full control) can delete, this is further restricted by another permission that disallows deletion (this applies to all users, even 'everyone' group) so I have to make the conscious decision to remove the disable permission, then enter that user's admin password on the UAC screen to delete any files. This is to hopefully prevent accidental deletion of any files and to prevent any malware corrupting these files (I don't ever install using that admin account or use that admin account for anything other than when I am using these files)
    • only my main account (read, write & execute) & that admin account has write capabilities (annoyingly though to rename/move a file the delete permission is used, why is that? Shouldn't rename at least be 'write' not 'delete'?)
    • Only that admin account can take ownership and/or edit permissions, through both the filesystem permission and the 'take ownership' power in Group policy (only that admin account has that ability). Again, like delete, further restricted by a 'deny take ownership & change permission' group which further disallows any other user from making changes
    • every other user, including the 'everyone' group only has read & execute access


    The annoying fact of all that is that any effort to change anything on that drive creates a *.tmp file, a simple right click, for example creates a tmp file. Is there a way to suppress these files being created as they are not automatically deleted by the OS, even when the permissions are not as restrictive as they are currently? It is quite annoying having random files pop up in a file structure that's being backed up to disk frequently (I often forget to remove the files).
    In addition, is there any other modifications I should make to further protect these files, such as any other accounts that should be denied write/delete access?
    Thank you, and I hope I have made a little bit of sense.
      My Computers


  2. Posts : 5,169
    64bit Win 10 Pro ver 21H2
       #2

    There is a Task Schedule event for DiskCleanup which you might be able to adjust so that it automatically deletes temporary files on a regular basis. It's just a suggestion but it might need the help of other experts to set it up for your particular circumstances.
      My Computers


  3. Posts : 24
    Windows Server 2016 Datacenter x64 [build 14393.5501]
    Thread Starter
       #3

    philc43 said:
    There is a Task Schedule event for DiskCleanup which you might be able to adjust so that it automatically deletes temporary files on a regular basis. It's just a suggestion but it might need the help of other experts to set it up for your particular circumstances.
    That is a very good idea, can't task scheduler be run under (as) any account? I could just set it to use the management admin account (full permissions one) and remove DenyDelAll group (as only the 'fully sorted' (well in theory they are supposed to be... although a lot of corrupted files have been found) have DenyDelAll applied to them) before the scheduled start to allow deletion, then restore DenyDelAll?
    thank you for your quick reply, I am doing a lot with these files currently (moving, renaming, decrypting, finding corrupted files & deleting corrupted files) in preparation for a full backup to BD-R disks, so accordingly a lot of those tmp files are being created
      My Computers


 

  Related Discussions
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 02:17.
Find Us




Windows 10 Forums