You can control the ability of users to select the AS/400 or IND$FILE File Transfer Send and Receive Buttons, and thus prevent a user from selecting either upload or download. This technical note describes how to obtain and configure the Reflection Group Policy that supports this functionality.
Step 1 â Download ReflectionPolicy.adm
Download and unzip the Reflection policy template:
2, Unzip the file to \%systemroot%\inf folder, such as C:\Windows\inf\.
You will see ReflectionPolicy.adm.
Step 2 â Install the Group Policy
To use this policy, the Reflection policy template must first be added to your Windows Group Policy editor by adding the ReflectionPolicy.adm file to the editor.
1. Open the Group Policy Editor: Run Gpedit.msc
from the command line.
Or, open the properties for an Organizational Unit in the Active
Directory Users and Computers console, click the Group Policy tab, and
edit or create a new policy object.
2. Under Computer Configuration, right-click Administrative Templates, and select Add/Remove Templates.
3. Click Add and browse to the \%systemroot%\inf folder, where you downloaded ReflectionPolicy.adm.
4. Select ReflectionPolicy.adm and click Open. When ReflectionPolicy.adm is in the list, close the Add/Remove Templates dialog.
Step 3 â Configure the File Transfer Button Availability
1. Under User Configuration
, expand the Administrative Templates
2. Click on Classic Administrative Templates (ADM) and expand this section.
3. Expand the Reflection Settings
4. In the right panel, double-click on the setting for either:
Allow files to be sent to host computers
Allow files to be received from host computers
5. Change the appropriate value to be Disabled.
Setting this value will disable uploads or downloads for all session types
including the FTP Client.
6. Press OK and exit the Group Policy Editor.
7. The Group Policy needs to take effect before this updated value can be used. There are a number of ways to "force" a Group Policy update:
a) Reboot the PC.
b) Wait for Microsoft Windows to eventually make the policy effective on it own.
c) Open a Command Prompt (as Administrator) and use the "gpupdate /force" option to force a Group Policy update to occur.