Link to home
Start Free TrialLog in
Avatar of Michael Medney
Michael MedneyFlag for United States of America

asked on

How do I make 1 users folder, it's subfolders and files read only but visible to all?

We have a user who wants to make her User folder and it's sub-folders and files visible to all but they can only open, read and print files. She does not want to have anyone making changes to her files, copying, moving or deleting them.

The files and folders reside on a Windows 2003 Small Business R2 server. The file structure is set up as follows:

F:\
    \Folder
    \Folder
    \Folder
    \Users
          \User1
          \User2
          \User wanting Read only
               \Folder A
               \Folder B
               \Folder C
               A bunch of individual files in the root of her user folder

Is there a way I can make all of her folders visible to all, but read only to all as well? Currently, all users have full rights to her folders and files.

Thanks in advance for any help,

Mike
 
ASKER CERTIFIED SOLUTION
Avatar of Lee W, MVP
Lee W, MVP
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
You will have to remove inheritance, choose to copy the settings that are there today. If not the other users will still be in there if they have access to the folders over. And then configure them to how you want it. The owner of the folder should have full access, and then use domain users as leew wrote or use authenticated users, and give that group read-only
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
eric27 is right, I missed the part about copying. And as he said, you can't stop that with just NTFS/share permissions.
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of Michael Medney

ASKER

Sorry for the late reply to all of you.

First, I want to thank all of you for your responses. The one's I actually like the best is that if someone can read a file they can copy it and print it. I knew this beforehand, but having you experts reply as such gave me the ammo to go back to the boss's son (who authorized this) and show him what a waste of time this is.

This is actually a case of closing the barn door after the horses got out. This girl feels that since she typed up the documents, they should be left in her user folder and nobody should be able to modify them. I had made a folder called "Shared' for all documents to stored in that weren't confidential. Another co-worker needed access to some of the training files that were done by the aforementioned "Princess", and so we copied these files to the Shared folder where they should be. This is what upset the Princess, so she whined to the boss's son and being the wuss that he is, he capitulated.

I have to go now - I will report back as soon as I can sneak a few moments.

Again, thanks to all.
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
OK, I got to sneak back here.

Well, now it seems that when I set everything back to full access for everyone (yes, I know, not recommended, but you have to experience this place to understand!), some of the Princess's files open and some give the "cannot open document: user does not have access privileges" message. This seems to happen randomly - some Word & Excel files open and some get the preceding message.

Is this a common occurrence or am I just getting lucky?
 
They may have altered permissions thinking they knew what they were doing.  As the admin, you should be able to reset the permissions (make sure you check the check box in the advanced settings to apply to all sub folders and files).  If you've been locked out of the files, you may need to take ownership of everything and then reset everything (taking ownership will alter Quota info if you use Quotas!)
@leew,

Is that the second check box in the Advanced Security Settings (Replace permission settings on all child objects with entries shown here that apply to child objects)?

Sorry for my Newbie-ness, but I'm kind of learning on the fly.
Well, somehow I managed to screw things up here. Now when I try to get into her folder from the server, nothing comes up and Windows Explorer freezes. At least I can close it through Task Manager.

A look at the Event Viewer Application log shows Event ID 1030 and 1058. I am now going to Google these events and see if I've totally hosed her folder. In case I have, would restoring from a tape backup solve the issue of some folders/files opening while others don't?
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
@leew,

I did not take ownership of her folder & files. When I tried to do so, that is when the system hung.
It seems now when I tryto right-click on any folders in Windows Explorer, it seems to hang. As I type this I had clicked on another folder and it is hanging. I will wait awhile and see if anything happens.
OK, I finally have time to finish this up. After all of the gyrations and machinations in setting this up, it turns out the Princess had previously asked the boss about keeping her folders/files private and he said no, those files are not private. So she does an end-around and goes to the son (the wuss) and he says OK to keep her from bothering him.

I ran dfsutils /purgemupcache and then rebooted the server and all of the error messages went away and things were back to normal. I restored her user folder from a tape backup and her files are back to where they were before this fiasco started and Windows Explorer isn't hanging.

Thanks to all that chimed in on this and gave me an education.
A lot was learned from the expert's advise and using what they have written I will now be able to go to the powers that be here and suggest once again re-doing the file structure we have on our server.

This is a great site and I am extremely glad I signed up for it. Just being able to search the knowledge base here will be a BIG help in the future

I just wish I could award more points to the experts who responded - the knowledge gained is valuable beyond words!
So glad we were able to help and thank you for the points.  :)