File permissions question

From: Sean (sean@nospam.com)
Date: 07/09/02 

From: "Sean" <sean@nospam.com>
Date: Tue, 9 Jul 2002 11:18:30 -0700

You can apply NTFS permisions on the "folder" where all
the scripts reside in. You need to assign the Everyone
group READ access to this folder. Make sure that you
check the box beside "Replace permission entries on all
child objects...". This will reset the file permissions
with this folder. This way, your users can only Read/View
your scripts and will not be able to change them.

Please note that with NTFS permissions always the LESS
restrictive permission will take affect. This means if a
user is in a group that has Write access to Folder A and
the same user is also is in a seperate group that has
Read access to Folder A, the user will have Write access
as it is less restrictive. The only exception to this
rule is if the user has specifically been DENIED access
to Folder A.

>-----Original Message-----
>Greetings,
>
>I am trying to configure some out of the ordinary
permissions on a network
>directory, and hope that someone can offer some
suggestions.
>
>Here is the break down:
>
>I've created a hidden network share, NETSHARE$, with
share permissions
>EVERYONE=FULL. Inside of NETSHARE$ I've put a VBscript,
THESCRIPT.VBS, and
>some other assorted scripts and apps
>
>THESCRIPT.VBS will create a shortcut or shortcuts on the
user's start menu
>to the other assorted scripts and/or apps in the
NETSHARE$ directory.
>THESCRIPT.VBS is called and executed via the user's
login script using the
>line: cscript \\TheServer\NETSHARE$\THESCRIPT.VBS
>
>What I have been attempting to do, I emphasize
attempting, is to set
>permissions on NETSHARE$ and/or THESCRIPT.VBS in order
to allow the script
>to run and create the shortcut(s), but deny users the
ability to view or
>change the scripts.
>
>I can't even get into what all I've changed in the
permissions, because I've
>made so many I've lost track.
>
>Thanks in advance for any suggestions,
>Utz
>
>
>.
>

Relevant Pages

  • Re: PHP 5.0.1 IIS 5 Win 2K AS
    ... IUSR has full control of the c:\php folder as permissions to the processor ... folder for the scripts. ... Norton's blocking the scripts as far as I know. ... Anyway, there's av, sure, but if it was blocking the php scripts, there ...
    (microsoft.public.inetserver.iis)
  • Re: Converting FAT32 to NTFS resetting permissions
    ... > convert the drive it just adds the everyone group to each folder including ... The permissions are contained in the security templates setup security.inf ... > I want to disable users running scripts but still be able logon scripts to ...
    (microsoft.public.win2000.security)
  • Re: Permissions
    ... It turns out that some scripts required higher ... permissions that others, but I can't figure out what the difference is. ... PHP exec or from shell commands need execute privilege. ... Apache with suexec: your CGIs run as the same user as the ...
    (comp.lang.php)
  • RE: Admins suddenly cannot edit login scripts.
    ... I tried adjusting the permissions on c:\windows\SYSVOL so that domain admins ... > So start with perms on the Logon Folder and the script inside this folder. ... > you have reqd permissions. ... >> able to edit the logon scripts. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Need some Cocktail advice
    ... Dudley Henriques wrote: ... I think I understand correctly from researching the help section that the scripts are cumulative; in other words, the weekly does the daily, and the monthly does the weekly as well. ... Secondly, I'm puzzled about when to run permissions and whether running the daily script is even necessary since it seems once a week, then once a month on the scripts seems an adequate maintenance program for the system. ... Leopard still has some bugs in it that will corrupt disks and there's no GUI for the warnings. ...
    (comp.sys.mac.apps)