We help IT Professionals succeed at work.

How to have more file control than windows ntfs permissions allow.

Medium Priority
Last Modified: 2013-12-02
I would like to know if anyone is aware of a third party app that would give me more control over file permissions than windows NTFS does.

This is the scenario. I work at a school I would like to create a file that students could submit work to (write) but then would be unable to modify or delete it. A final submission folder if you will. It would also be nice if I could control user access to the file that a student has created so that another student couldn't copy it and call it their own. That isn't to important though because we can check the created dates and that usually weeds out the ones doing the copying.
Watch Question

It sounds like what you want to do is to create a "Drop Box".  I dont know if that is the official term or not, but I work for a few schools that have this setup, and thats what we call it.  The Drop Box is a folder where people have only the ability to put things in it.  They can see other items in the folder I think, but they cannot open it, or modify items within the folder.  Things can get put in, but thats about it.  Thus the name Drop Box.

How to do it:
First of all, you have to have simple File Sharing disabled.  Hopefully you already do.
Right click on the shared folder that you want to setup. Go to the last option, Properties.  Then go to the Security tab when the window pops up.  On the security tab, set the Write permission for the users to WRITE only.  Then click deny on all the other permissions.

Microsoft site has similar explanation here:

Let me know how you make out, or if you need any additional details.

Not the solution you were looking for? Getting a personalized solution is easy.

Ask the Experts
Also... if you are looking to spend a little bit of money, and/or are already considering getting an external hard drive, the Western Digital MyBook World Drive has some easy setup features under the Manage MyBook properties that could give various access levels to whomever you choose.  The World Drive edition costs a little more than the standard edition (which they call the essentials edition), but does have that nice little feature.
If you want to save some money, the above method should allow you to do everything you listed without having to buy any additional software.  Peace.
Distinguished Expert 2019

A share that has write permission but lacks read permissions by the students is what you are looking for.

Alternatively, you can setup a web page where students would upload their file.
This mechanism will enable you to manage the file names to avoid one student overwriting anothers file.
If your current users have login credentials, you can use that to tag which user uploaded which file.
A drop box is geared more towards a suggestion type of issue rather than a mechanism that you can easily determine which user provided which file.


Thanks, it is always the simple solutions that seems to elude me. I never thought about taking away the read permissions.
Access more of Experts Exchange with a free account
Thanks for using Experts Exchange.

Create a free account to continue.

Limited access with a free account allows you to:

  • View three pieces of content (articles, solutions, posts, and videos)
  • Ask the experts questions (counted toward content limit)
  • Customize your dashboard and profile

*This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.


Please enter a first name

Please enter a last name

8+ characters (letters, numbers, and a symbol)

By clicking, you agree to the Terms of Use and Privacy Policy.