Folder permission son 2003 PDC

Our customer has 2003 SBS, when the server was first put in the created an excel document which has now grown in size, they are worried about people moving or deleting it as it is contained in a very inappropiate named folder called "temp".
We have agreed that it is too much work/hassle involved in moving it and re-creating links etc. So they want security on it.
We implemented folder security in th parent folder of the excel documents; this caused the problem that the 2 people assigned full access can use it etc, but when the other staff view it they create temp files that can not be deleted due to their account not having delete privileges.
We need to implement some form of security that allows 2 people full acess, the others read-only access, and the "user" account built into Windows to take no notice and abide to the security setup for indiviual people.
Any ideas?
LVL 1
total123Asked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

NJComputerNetworksCommented:
Folder name = Exceldata (NTFS Permissions: ExcelChange-DLG = Change, ExcelREAD-DLG = READ)
Share Name = Exceldata (Share permissions = Everyone Change)

Create a domain global group called EXCELCHANGE-GG
Create a domain global group called EXCELREAD-GG

Create a domain local group called EXCELCHANGE-DLG
Create a domain local group called EXCELREAD-DLG

Put the EXCELCHANGE-GG (global group) into the EXCELCHANGE-DLG (domain local group)
Put the EXCELREAD-GG (global group) into the EXCELREAD-DLG (domain local group)

Put all user accounts that need full control of the Excel file into the EXCELCHANGE-GG
Put all user accounts that need read only access to the Excel file into the EXCELREAD-GG

Make sure that the Excel file can be edited by multiple users at the same time:  Tools --> Share Workbook





Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2003

From novice to tech pro — start learning today.