Restricting "move" access to a network folder
I was wondering if it is possible to ALLOW read/write permissions to a folder, but DENY them the ability to move an item out of the folder. The OS is windows 2003 small business server running in a domain environment. if you need any more details post them and i will get back ASAP. thanks in advance =)
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
BTW, If you don't want to file to be removed, just deny delete permissions
A move is no more than a copy with a delete. If you deny modify permissions it will keep it from being deleted off the box.
ASKER
ok ill explain a little better. a client of mine uses one network folder for their entire office to save to. everyone needs to be able to access them. they are allowed to make additional copies if they want to so i dont need to worry about them using "save as" and saving it somewhere else, as they are all scanned documents and can not be edited. BUT, if an employee MOVES the document out of the folder then nobody else can access it and it becomes a "lost" file. so i need to restrict them so that atleast 1 copy of it stays in that said folder.
So if you deny delete/modify permissions, the file will always be there.
ASKER
"as they are all scanned documents and can not be edited"
sorry, they can be edited and need to be able to modify them.
I have already told the client that the only realistic way to do it other than taking away all the permissions the are asking to be allowed to do would be sit behind the employye with a beating stick and watch their every action (altho i didnt say those exact words).
sorry, they can be edited and need to be able to modify them.
I have already told the client that the only realistic way to do it other than taking away all the permissions the are asking to be allowed to do would be sit behind the employye with a beating stick and watch their every action (altho i didnt say those exact words).
As I said above, denying modify should do it.
unless I misunderstood, the author just said in the post above that the clients need to be able to modiy the files.
"sorry, they can be edited and need to be able to modify them."
Meaning if you deny the modify permission they won't be able to edit them anymore
"sorry, they can be edited and need to be able to modify them."
Meaning if you deny the modify permission they won't be able to edit them anymore
The author said in a following statement that "they are allowed to make additional copies if they want to so i dont need to worry about them using "save as" and saving it somewhere else, as they are all scanned documents and can not be edited."
I will ask for a share here for time and effort expended.