Re: Permission to Copy Files to Server Folder But Not Edit Them

Janna

This is, as other posts have likely clued you, a difficult criteria to meet.
If you grant generic Read/Execute to your group, and then also add
your group again but remove all except Write on the generic dialogue
and then click Advanced, highlight the Write grant to your group and
click Edit and there change the Applies to to Files Only, and if you
also remove any grants to Creator Owner or to other groups that
contain the accounts to be restricted, then you are close to what you
are after.

With these configured, accounts will not be able to create Office
documents in the folder, but they should be able to copy them there.
This is because Office application tend to use temporary files that
get renamed, etc. so your users will need to be informed that they
should only put file in this area once they have created, proofed,
and are satisfied with them.

Now, you would still need to address the ownership issue by such
as Steve suggested to make their using ownership more difficult
(note that commandline permissions tools exist) or by using such
as Shenan has outlined so that they are no longer owner (this is
the only totally effective solution using a share).

Now, there is a third alternative, which is to use an intermediate,
such as a web interface or sharepoint web. In this case, because
all saves are already mediated by the web server-side code, you
implicitly are already exerting complete contraint over all accesses
and their types to what is there.

Roger

"Janna" <Janna@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:AEFFF6E2-10E5-451E-9599-B9B08696FCAE@xxxxxxxxxxxxxxxx
On a Windows 2003 Server I would like a specific user to have permission
to
add Excel files to a folder on the server from his own workstation, but
not
be able to edit the files, once they are placed into the folder. He still
needs to be able to open and read the files, once they are in the folder
on
the server, just not be able to make changes to them.

Can anyone tell me what combination of file permissions in Windows 2003
Server would produce this result. Thanks in advance!


.

Relevant Pages

  • Re: can I use GPO for remote folder management?
    ... > that group to have the permissions you want him able ... > to grant to others. ... Folder and subfolders. ... >> we have one stand alone 2003 server. ...
    (microsoft.public.win2000.group_policy)
  • Re: users, groups, and access to a folder
    ... whether that account can use that grant will depend on ... Users list on Server A: ... can have an access to the folder on the ServerB? ...
    (microsoft.public.windows.server.security)
  • RE: Errors Doing Folder Redirection via GPO
    ... It seems that the issue is caused by permission settings on the server ... Grant the user ownership and full permissions to the folder on the ...
    (microsoft.public.win2000.general)
  • Re: sharing folders on win2003 without joining domain
    ... Create a user on the server with the same username and password the user ... needing access to the folder uses to log onto their computer. ... Grant the user ...
    (microsoft.public.win2000.networking)
  • RE: Remote Access to Server
    ... grant the user allow permission to the share folder, ... >Thread-Topic: Remote Access to Server ... I will give the VPN option ... Grant permissions to the user or group ...
    (microsoft.public.windows.server.sbs)
Loading