Re: Permissions on 'My documents'



Ram,
From your post's implications it seems you are considering placing a
Deny of Write over all hard disk on a user's system, or or otherwise
effecting removal of all grants of Write - with the exception of their
My Documents.

Any account needs the ability to write in some areas outside of their
My Documents.

If you are using an XP client system you will find that users that have
only limited accounts are fairly much restricted to only what is needed,
except that they have a grant at the root of the install drive allowing
them to make new folders at that level and have full control of them
(change the Users grants so read/execute is the only one, removing
the two special grants that allow creates, and remove the Creator
Owner grant, and DO NOT use the checkbox that makes the change
over all that is contained).
If there are other partitions besides the install partition, adjust those
as desired. You do not need to be so careful with those others as
one MUST BE CAREFUL with the install partition.

"Ram" <Ram@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:36469A3D-FEB8-40EF-8BC4-D2ED2CEA377F@xxxxxxxxxxxxxxxx
Dear All,
How can I provide 'write' access to users on their 'My Documents'
folder, at the same time denying them 'write' access on their local drive?
Can this be possible without redirecting 'My documents' to a network
folder?

Regards
Ram



.



Relevant Pages

  • Re: Allow saves and reads but not edits
    ... >> To what was the ACE applied where you have in advanced ... >> Suppose you have a new folder, and on it there are two ... >> and subfolders and it grants Read & Execute. ...
    (microsoft.public.win2000.security)
  • Re: Restore file permissions using xcacls.exe
    ... When dealing with Special permissions in W2k you need to be ... of flags in the ACEs as the list ... of generic grants. ... being for This folder and subfolders. ...
    (microsoft.public.security)
  • Re: Allow saves and reads but not edits
    ... > Suppose you have a new folder, and on it there are two ... > and subfolders and it grants Read & Execute. ... > In this edit view of the ACE check Create files / write data ...
    (microsoft.public.win2000.security)
  • Re: User Templates
    ... It is in a folder that grants all "users" all ... permission. ... >> server. ...
    (microsoft.public.windows.server.sbs)
  • Re: permission denied on overwriting files (2003)
    ... If Owner Creator has a grant on the containing folder, ... The account I was using for it was somehow overruling my FTP ... As far as you earlier post and extra grants: ...
    (microsoft.public.windows.server.security)