Link to home
Start Free TrialLog in
Avatar of cchs2
cchs2

asked on

How to turn off Execute File, but leave on Traverse Folders?

I'd like to allow students to browse all the files on their home directories, but not execute any downloaded files. It looks to me like that can't be done, as they're either both allowed or both prohibited. That tells me that I must be missing something, but what?

Thanks!
Avatar of bbao
bbao
Flag of Australia image

give only "List Folder Contents" permission to the students....
Avatar of cchs2
cchs2

ASKER

Sorry, I may not have been as clear as I should have. They have to be able to read and write their own files, but not execute. We'd like to prohibit executing downloaded files.
with "List Folder Contents" permission, the restricted users can only see folder content, but are not allowed to read/write/execute the files in the folder. is it what you are looking for?
Avatar of cchs2

ASKER

No, they need to be able to read and write, but not execute.
sorry, it is impossible.

read = read and load into the memory (allowed by the NTFS permission)
execute = read and load into the memory + run it from the memory (controlled by the client, NOT the server)

that means, giving READ permission equals allowing to EXECUTE.

the server cannot control how the remote client deals with the data it has read (loaded) from the server.

hope it helps,
bbao
Avatar of cchs2

ASKER

What if I gave Read, Write, and List Folder, but not "Read & Execute"?
ASKER CERTIFIED SOLUTION
Avatar of bbao
bbao
Flag of Australia image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial