Solved

Modify files in share but do not allow new files to be written.

Posted on 2006-11-22
4
143 Views
Last Modified: 2013-12-04
Microsoft shop
Servers are 2003 / Clients are XP (SP2)

Share is on a 2003 server, need to allow certain users the ability to modify existing documents in the share but not create new ones or delete existing ones.

Current settings:
SharePermissions:
Domain Users (Read)
Domain Admins (Full)
Programming Group (Change/Read) - This is the one with the needed permissions.
DocControl Group (Full)

SecuritySettings:
Domain Users (Read)
Domain Admins (Full)
Programming Group (Traverse Folder / Execute File, List Folder / Read Data, Read Attributes, Read Extended Attributes, Create Folders / Append Data, Read Permissions)
DocControl Group (Modify)

Any thoughts
0
Comment
Question by:shoemakerbrian
  • 2
4 Comments
 
LVL 31

Accepted Solution

by:
Toni Uranjek earned 250 total points
ID: 17999174
You won't be able to modify files with this NTFS permissions. You need Write permission to modify existing documents, Append Data will not help, unfortunately. When you change file special NTFS permission Write Data, Write Attributes and Write Extended attributes should be set to Allow!
0
 
LVL 1

Expert Comment

by:beckman55
ID: 20304989
NTFS and Share permissions will cancel each other out in a way.  Rather than get into explaining how....my instructor recommended to me to set SHARE permissions to everyone FULL CONTROL....then use just the NTFS permissions to restrict access.  Then there is no thinking of if share=read and NTFS=write what is the final result.   I hope that makes sense.  

If you need more info let me know.
0
 
LVL 31

Expert Comment

by:Toni Uranjek
ID: 20307383
Using Everyone Full Control permission is bad security practice. If possible Everyone should be removed and "Authenticated users" group used instead.
0
 
LVL 1

Author Comment

by:shoemakerbrian
ID: 20316837
Actually what I did was wrote a vbscript to assign permissions to the files themself and left the directories alone.

Thank you for all your assistance though.
0

Featured Post

Backup Your Microsoft Windows Server®

Backup all your Microsoft Windows Server – on-premises, in remote locations, in private and hybrid clouds. Your entire Windows Server will be backed up in one easy step with patented, block-level disk imaging. We achieve RTOs (recovery time objectives) as low as 15 seconds.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Nessus scan 5 269
PGP whole disk encrypted Laptops 5 60
PGP key : industry standard 2 67
Server 2008-R2 lost password 19 97
Recently, I read that Microsoft has analysed statistics for their security intelligence report. It revealed: still, the clear majority of windows users do their daily work as administrator. An administrative account is a burden, security-wise. My ar…
Our Group Policy work started with Small Business Server in 2000. Microsoft gave us an excellent OU and GPO model in subsequent SBS editions that utilized WMI filters, OU linking, and VBS scripts. These are some of experiences plus our spending a lo…
With the power of JIRA, there's an unlimited number of ways you can customize it, use it and benefit from it. With that in mind, there's bound to be things that I wasn't able to cover in this course. With this summary we'll look at some places to go…
Learn how to create flexible layouts using relative units in CSS.  New relative units added in CSS3 include vw(viewports width), vh(viewports height), vmin(minimum of viewports height and width), and vmax (maximum of viewports height and width).

910 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

23 Experts available now in Live!

Get 1:1 Help Now