Re: NTFS Delete right is needed to save Office documents

From: Roger Abell (mvpNOSpam_at_asu.edu)
Date: 01/02/05 

Date: Sun, 2 Jan 2005 10:31:44 -0700

Ahhh - I see where you were coming from.
I had not thought that the OP wanted everyone to also be
able to deposit new files into the directory. Indeed, if
that is so then this would not work, at least not totally.
If either some "folder monitor" was responsible for adding
new files, or if the file owner being the only one able to
delete the file, then perhaps this is a solution.

The issue you mention of pre-existing files then being
able to be deleted by their owners is non-existent as the
Owner Creator gets translated to the exact account at the
time of creation. 

-- 
Roger Abell
Microsoft MVP (Windows  Security)
MCSE (W2k3,W2k,Nt4)  MCDBA
"Karl Levinson, mvp" <levinson_k@despammed.com> wrote in message
news:u%23xStoC8EHA.2124@TK2MSFTNGP15.phx.gbl...
>
> "Roger Abell" <mvpNOSpam@asu.edu> wrote in message
> news:ufwiYj17EHA.3700@tk2msftngp13.phx.gbl...
>
> > > > Would not use of a grant of modify to Creator Owner allow
> > > > for the tmp file to be deleted ?
> > >
> > > Not sure, but I wouldn't think so.  At any rate, the only reasonable
way
> > to
> > > assign delete permissions to temp files on the fly would be to make
the
> > > default permission on the folder in question allow file deletion,
which
> > > undoes what the OP is trying to do.
> > >
> >
> > ????   A grant on the containing folder of modify to Creator Owner
> > does do just that.  No change of the not granting Delete on file not
> > created by the account, but temp files that are created by the account
> > may be deleted.  That is sort of what Creator Owner was designed
> > for.  However, where I am iffy on this is whether Office checks and
> > barks if the file itself being opened is not loosely premissioned. but
> > it do not think it will.
>
> I'm not sure if I fully understand, but I think in that scenario, the
> problem is that new Office files created would be able to be deleted.
[You
> couldn't try to solve this problem by configuring the folder so that users
> could not create new files themselves, because that would also inhibit the
> creation of the necessary temp files.]  Also, you'd have to make sure none
> of the existing files in the folder were owned by any of the users in
> question.  And, that would be messy to maintain, requiring constant
> vigilance regarding permissions on newly created files.
>
> I don't think Office would complain... If the office doc can be modified
and
> the temp file can be created in the existing folder, I think it only
> complains at the end, when the file is saved or closed, if that temp file
> cannot be deleted.
>
>
>

Relevant Pages

  • Re: Dont Administrators have access to everything?
    ... folder, which the Limited users getaccess to. ... One of the Administrators is the Owner of nearly every ... the few that can be opened, but I thought the Administrators ... If you're an admin and you take ownership, and you replace permissions, ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Lets talk about ownership!
    ... They will have the same permissions but the permissions are meaningless as there is no user to match. ... According my previous example the user "Terry" has read/write permissions on folder NickData. ... Ownership doesn't really matter as long as you have permissions. ... XP can be configured in Local Security Policy to make the Admin group the owner for files created by admins. ...
    (microsoft.public.windowsxp.general)
  • Re: Files and Folder Permissions
    ... Without knowing exactly what you are trying to accomplish all I can say is - try the various settings until you get the combination that works for you. ... You may want to play with a test folder until you figure out what works. ... Finally would I need to select the Replace permissions entries on all child ... If the users are running programs like Office that create temp files ...
    (microsoft.public.windows.server.general)
  • Re: temporary files created when saving a document as
    ... I am a bit concerned on why Microsoft would create the permissions Read Write ... but not allow their Office products to work this way. ... This article describes how Word uses temp files. ... I take a look at the folder and notice that there is already a document ...
    (microsoft.public.office.misc)
  • Re: Managing Security Groups as Distribution Lists
    ... then you wouldn't have to worry about setting any permissions at ... allow them to manage the security groups. ... > Each folder on my file server have folder owner and 3 corresponded groups ... > checking with the owner of the folder what permission to give him, ...
    (microsoft.public.windows.server.active_directory)
Loading