Re: deny delete, allow change permission fails with excel files

From: Karl Levinson [x y] mvp (levinson_k@excite.com)
Date: 12/30/02 

From: "Karl Levinson [x y] mvp" <levinson_k@excite.com>
Date: Mon, 30 Dec 2002 17:13:07 -0500

"Jonathan" <jonathan@iqzero.net> wrote in message
news:2c0d01c2b015$0680eeb0$8bf82ecf@TK2MSFTNGXA05...
> Trying to allow users to add, read, modify but not delete
> files on a win 200 advanced server using Active Directory.
>
> In the advanced file settings for the folder, I have
> removed the delete permissions and added deny permissions
> (and tried a host of other combinations). Excel files
> refuse to save under the original file name at this point,
> offering a temporary name instead. In the end one file
> will become many different files. The permissions work
> with an ordinary text file.

That's just the way Office works. Removing the delete permission is usually
undesirable.

In my experience with Office 2000, I was able to save files, although I
would get an error message saying that the save was not successful. This
might be different for you I suppose. Also, I was not able to create new
files by clicking on File, New, so I could only create new files by
right-clicking on the folder within Windows Explorer and selecting New,
Office Document or whatever.

Alternatively, you could use different programs other than Microsoft Office
to view documents. Or, you could write a batch file using the FOR x IN y DO
XCACLS etc. etc. that removes delete permissions for all files while
leaving the users with delete permission on the folder itself. The batch
file would need to re-run and you would need to code it carefully so as not
to overwrite permissions each time it is run. XCACLS comes with the Windows
Resource Kit or Technet, so it is not free.

However, in most business environments, you'll probably want to restore the
Delete permission for everyone.

Relevant Pages

  • Re: xcacls
    ... I have found fileacl more useful than xcacls for situations that require special ... on the parent folder as "w" alone would not work for write. ... permissions and full permissions to subfolders and files as shown in the ...
    (microsoft.public.win2000.security)
  • Re: permissions problem
    ... Try using Xcacls instead. ... xcacls on a test computer or folder first. ... work which are for - grant, edit, and subfolders. ... important or all current permissions will be replaced by the new user ...
    (microsoft.public.win2000.security)
  • Re: XCACLS inheritance permission & warning message questions - please help
    ... > Is it possible to set that option on the parent folder using XCACLS or ... > All the permissions on folders under MYGROUP are set accordingly, ... Extended Change Access Control List Tool (Xcacls) ... -- torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway Administration scripting examples and an ONLINE version of the 1328 page Scripting Guide: ...
    (microsoft.public.win2000.cmdprompt.admin)
  • Re: xcacls
    ... > Hi Dave. ... > I have found fileacl more useful than xcacls for situations that require ... > the command below may do what you need by giving the top folder ... > permissions and full permissions to subfolders and files as shown in the ...
    (microsoft.public.win2000.security)
  • Re: XCACLS and Home Folder?
    ... Can I use xcacls or cacls to strip all permissions off of the home ... Can I use xcacls to just remove the full control attribute and leave ... permissions to every file and subdirectory in the folder.] ... > MCSE, CCNA ...
    (microsoft.public.win2000.security)