Hi I've just started in a new organisation which has a curious I.T. setup that needs some serious work, the security is actually frightful internally.
Anyway... Enough with that, and on to my problem...
We're running Windows 2000 Server and the hard drive is formatted as NTFS.
I have a large group of users ( 100 users+ ) each user has their own folder inside a parent User folder. Their folder permissions are for Full Control for themselves and for the Administrators group. We're having some annoying troubles with users changing attributes on files. I wish to stop them from changing their attributes by taking away the right to "write attributes" on their folder and all sub-objects (files and folders).
What would be the best automated way to achieve my aim? Am I looking at programming a script? Or something more simple?