Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people, just like you, are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
Solved

Windows 2003 - Permissions Configuration

Posted on 2011-09-23
13
133 Views
Last Modified: 2012-05-12
Hello Everyone,

I have a particular permssions setup that I need some help with. I would like to setup a folder and it subfolders in the following way:

1. Allow users to create new files
2. These files to automatically set as read only as soon as they are created.
3. For users to not be able to delete files.

I cannot find a permission combination that ticks all these boxes, does anyone have any ideas?

Thanks

Dave
0
Comment
Question by:TriumphLTD
  • 7
  • 6
13 Comments
 
LVL 7

Expert Comment

by:Dusan_Bajic
ID: 36586178
Perhaps you cold use usual permissions, and then run batch job every xx seconds to set all files to read only. But this solution even if it works is not something I would ever do in my environment - file permissions are not designed to serve as document management system.
0
 

Author Comment

by:TriumphLTD
ID: 36587777
ok point noted. They do have a peice of software that does this but it's very expensive and not very user friendly, this is why we are trying to figure out a different way. Thankyou any way.

Does anyone else have any ideas?

Thanks
0
 
LVL 7

Expert Comment

by:Dusan_Bajic
ID: 36588516
There is often a free or open source alternative. Perhaps if you tell what software are you using now, or explain i little more detail what exactly are you trying to achieve?  
0
Optimizing Cloud Backup for Low Bandwidth

With cloud storage prices going down a growing number of SMBs start to use it for backup storage. Unfortunately, business data volume rarely fits the average Internet speed. This article provides an overview of main Internet speed challenges and reveals backup best practices.

 

Author Comment

by:TriumphLTD
ID: 36597864
The customer curently uses some software called Open-Attach by Open-Gi. It is extreamly unfriendly to use so they wanted to move away from this.

If we could do the same thing in Windows files and fodler sthis would be great but my research is telling me this is not as easy as first thought!

Really all I am trying to achieve is:

1. Allow users to create new files
2. These files to automatically set as read only as soon as they are created.
3. For users to not be able to delete files.

I need to make sure files cannot be deleted as this is a legal requirement in thier market sector. They also do not want files to be overwritten for the same reason and also so they have a paper trail to see file changes.

I have suggested shadow copy but as this runs on set times there is a chance it will miss something.

Thanks

Dave
0
 
LVL 7

Expert Comment

by:Dusan_Bajic
ID: 36598220
Any specific type of document (.doc, .xls,...) or various?
0
 
LVL 7

Expert Comment

by:Dusan_Bajic
ID: 36598376
One more question: what amount of data are we talking about? How many users/files/gigabytes (added daily and total on server)?
0
 

Author Comment

by:TriumphLTD
ID: 36599075
It's mainly word docs here and very little is added each day. Maybe about 100MB if that and by only about 10 users.

Dave
0
 
LVL 7

Expert Comment

by:Dusan_Bajic
ID: 36599322
You can try with permissions in attached file. Users will be able to copy file to folder and read from there, with no deleting/renaming/modifying allowed (so they will have to create file on their desktop and then copy to destination). If they try to create file directly in folder, there will be an error and empty file will be created.


 permissions
0
 

Author Comment

by:TriumphLTD
ID: 36599829
Hi There,

Thats very close to what I had! I  really need them to be able to create files in there too, would there be anyway of addign that?

Cheers

Dave
0
 
LVL 7

Expert Comment

by:Dusan_Bajic
ID: 36600563
I don't think it is possible. It seems like when you create new file directly in the folder (for example by using Save as... from File menu) what windows actually does is it first create new empty file with given name, and than it adds content, so it basically modifies file. Allowing that will also allow users to later modify that file.  
0
 

Author Comment

by:TriumphLTD
ID: 36707925
Ah I see, that makes sense. I think maybe I wil have to stick with the 3rd party software. Thanks for doing that research, good to know you got the same results as I did!

Thanks again
0
 

Author Comment

by:TriumphLTD
ID: 36890708
Just to update people, there is some free software call sub-version that can do this, also I have a call logged with Microsoft and will post back once they have given me some answers
0
 
LVL 7

Accepted Solution

by:
Dusan_Bajic earned 500 total points
ID: 36890800
Sure, there are lots of versioning and a revision control systems (Subversion being most popular, with many different supported clients, Tortoise is quite popular on windows), they are widely used in software development and they can also work with binary files such as .doc. But I believe they are not that easy to setup for your need and I am not sure that in the end it will be more comfortable to use than previous suggestions.
Of course, give it a try if you have time to spare.
0

Featured Post

Free Tool: SSL Checker

Scans your site and returns information about your SSL implementation and certificate. Helpful for debugging and validating your SSL configuration.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

The HP utility "HP Lights-Out Online Configuration Utility for Windows Server 2003/2008" could be of great use when it comes to remotely configure a HP servers ILO WITHOUT rebooting the server. We would only need to create and run scripts using thi…
by Batuhan Cetin In this article I will be guiding through the process of removing a failed DC metadata from Active Directory (hereafter, AD) using the ntdsutil tool in a Windows Server 2003 environment. These steps are not necessary in a Win…
Microsoft Active Directory, the widely used IT infrastructure, is known for its high risk of credential theft. The best way to test your Active Directory’s vulnerabilities to pass-the-ticket, pass-the-hash, privilege escalation, and malware attacks …
In an interesting question (https://www.experts-exchange.com/questions/29008360/) here at Experts Exchange, a member asked how to split a single image into multiple images. The primary usage for this is to place many photographs on a flatbed scanner…

809 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question