sattech2000
asked on
Win 2000 Folder Permissions.
Afternoon! Setup in windows 2000 AD, I need to create a share directory that will allow users to place completed documents. Once placed in the directory users should only be able to read the file, no edits or deletes. I’ve gotten close by setting the windows file permissions but the only thing I haven’t figured out yet is denying the owner the ability to change(add full control) the inherited permissions even though I have set deny change permissions for both ‘creator owner’ and ‘domain users’. I have verified the user is only a member of the domain users group and for some reason the user can still change the permissions.
Or is there an easier way around this ‘cause I still need to deal with word creating those darn temp files.
Any thoughts?
Thanks a bunch
Randy
ASKER
hmmm that might be a plan b. Now that I think of it I have robocopy doing some transfers/monitoring, I could easily add another path to it for this purpose. Anyone else have a better idea?
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
sorry, haven't reloaded this page while testing. So did not see your answer (just in case you're wondering ;-)
ASKER
Hard to belive there isn't a way to do this but Tolomir did sugest an acceptable workaround that is working. Thank you
Randy
Randy
Move every 10 minutes a document in a "transfer folder" to a r/o folder - if a filename does not yet exist. (the script runs with admin permissions, so copying should be no problem)
This could be accomplished with the normal windows scheduler + a small batch script.
---
Afaik, you won't be able to setup permissions as you like. Especially in win2k.
Tolomir