Suppose in a network there is a file server which's storage is shared between all workstations and all users require full read/write access to this storage for their cooperation workflow. (Over samba, afd and nfs)
If (at least) one client gets infected by ransomware, how can that infection be kept from encrypting/affecting the whole file servers data?
The only effective countermeassure I can think of is to forbid write access and only explicitly grant it on request for all write/delete actions, but this seems to introduce a big organizational overhead.
I'm not asking how to recover from such a szenario - backups are in place that should keep the damage minimal in such a case.
I'd rather not use these backups and keep the effect of the infection local, e.g. keep it off the server altogether.