Restricting "move" access to a network folder

I was wondering if it is possible to ALLOW read/write permissions to a folder, but DENY them the ability to move an item out of the folder. The OS is windows 2003 small business server running in a domain environment. if you need any more details post them and i will get back ASAP. thanks in advance =)
DebbieFostAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

DVation191Commented:
Even if you could do that, it would be useless.

Say there was a word document you wanted to apply this rule to. All I'd have to do to circumvent this would be to open the document, which loads it into memory, then save it in another location.
While I wouldn't have moved the file per se, I am still creating another location for it.

Maybe if you could explain what you are trying to prevent, I could give you more accurate suggestions for permissions settings
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
DVation191Commented:
BTW, If you don't want to file to be removed, just deny delete permissions
0
Steve McCarthy, MCSE, MCSA, MCP x8, Network+, i-Net+, A+, CIWA, CCNA, FDLE FCIC, HIPAA Security OfficerIT Consultant, Network Engineer, Windows Network Administrator, VMware AdministratorCommented:
A move is no more than a copy with a delete.  If you deny modify permissions it will keep it from being deleted off the box.
0
Ultimate Tool Kit for Technology Solution Provider

Broken down into practical pointers and step-by-step instructions, the IT Service Excellence Tool Kit delivers expert advice for technology solution providers. Get your free copy now.

DebbieFostAuthor Commented:
ok ill explain a little better. a client of mine uses one network folder for their entire office to save to. everyone needs to be able to access them. they are allowed to make additional copies if they want to so i dont need to worry about them using "save as" and saving it somewhere else, as they are all scanned documents and can not be edited. BUT, if an employee MOVES the document out of the folder then nobody else can access it and it becomes a "lost" file. so i need to restrict them so that atleast 1 copy of it stays in that said folder.
0
DVation191Commented:
So if you deny delete/modify permissions, the file will always be there.
0
DebbieFostAuthor Commented:
"as they are all scanned documents and can not be edited"

sorry, they can be edited and need to be able to modify them.

I have already told the client that the only realistic way to do it other than taking away all the permissions the are asking to be allowed to do would be sit behind the employye with a beating stick and watch their every action (altho i didnt say those exact words).
0
Steve McCarthy, MCSE, MCSA, MCP x8, Network+, i-Net+, A+, CIWA, CCNA, FDLE FCIC, HIPAA Security OfficerIT Consultant, Network Engineer, Windows Network Administrator, VMware AdministratorCommented:
As I said above, denying modify should do it.
0
DVation191Commented:
unless I misunderstood, the author just said in the post above that the clients need to be able to modiy the files.
"sorry, they can be edited and need to be able to modify them."
Meaning if you deny the modify permission they won't be able to edit them anymore
0
Steve McCarthy, MCSE, MCSA, MCP x8, Network+, i-Net+, A+, CIWA, CCNA, FDLE FCIC, HIPAA Security OfficerIT Consultant, Network Engineer, Windows Network Administrator, VMware AdministratorCommented:
The author said in a following statement that "they are allowed to make additional copies if they want to so i dont need to worry about them using "save as" and saving it somewhere else, as they are all scanned documents and can not be edited."
0
Steve McCarthy, MCSE, MCSA, MCP x8, Network+, i-Net+, A+, CIWA, CCNA, FDLE FCIC, HIPAA Security OfficerIT Consultant, Network Engineer, Windows Network Administrator, VMware AdministratorCommented:
I will ask for a share here for time and effort expended.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Networking

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.