Solved

Windows 2003 - Permissions Configuration

Posted on 2011-09-23
13
131 Views
Last Modified: 2012-05-12
Hello Everyone,

I have a particular permssions setup that I need some help with. I would like to setup a folder and it subfolders in the following way:

1. Allow users to create new files
2. These files to automatically set as read only as soon as they are created.
3. For users to not be able to delete files.

I cannot find a permission combination that ticks all these boxes, does anyone have any ideas?

Thanks

Dave
0
Comment
Question by:TriumphLTD
  • 7
  • 6
13 Comments
 
LVL 7

Expert Comment

by:Dusan_Bajic
ID: 36586178
Perhaps you cold use usual permissions, and then run batch job every xx seconds to set all files to read only. But this solution even if it works is not something I would ever do in my environment - file permissions are not designed to serve as document management system.
0
 

Author Comment

by:TriumphLTD
ID: 36587777
ok point noted. They do have a peice of software that does this but it's very expensive and not very user friendly, this is why we are trying to figure out a different way. Thankyou any way.

Does anyone else have any ideas?

Thanks
0
 
LVL 7

Expert Comment

by:Dusan_Bajic
ID: 36588516
There is often a free or open source alternative. Perhaps if you tell what software are you using now, or explain i little more detail what exactly are you trying to achieve?  
0
 

Author Comment

by:TriumphLTD
ID: 36597864
The customer curently uses some software called Open-Attach by Open-Gi. It is extreamly unfriendly to use so they wanted to move away from this.

If we could do the same thing in Windows files and fodler sthis would be great but my research is telling me this is not as easy as first thought!

Really all I am trying to achieve is:

1. Allow users to create new files
2. These files to automatically set as read only as soon as they are created.
3. For users to not be able to delete files.

I need to make sure files cannot be deleted as this is a legal requirement in thier market sector. They also do not want files to be overwritten for the same reason and also so they have a paper trail to see file changes.

I have suggested shadow copy but as this runs on set times there is a chance it will miss something.

Thanks

Dave
0
 
LVL 7

Expert Comment

by:Dusan_Bajic
ID: 36598220
Any specific type of document (.doc, .xls,...) or various?
0
 
LVL 7

Expert Comment

by:Dusan_Bajic
ID: 36598376
One more question: what amount of data are we talking about? How many users/files/gigabytes (added daily and total on server)?
0
Best Practices: Disaster Recovery Testing

Besides backup, any IT division should have a disaster recovery plan. You will find a few tips below relating to the development of such a plan and to what issues one should pay special attention in the course of backup planning.

 

Author Comment

by:TriumphLTD
ID: 36599075
It's mainly word docs here and very little is added each day. Maybe about 100MB if that and by only about 10 users.

Dave
0
 
LVL 7

Expert Comment

by:Dusan_Bajic
ID: 36599322
You can try with permissions in attached file. Users will be able to copy file to folder and read from there, with no deleting/renaming/modifying allowed (so they will have to create file on their desktop and then copy to destination). If they try to create file directly in folder, there will be an error and empty file will be created.


 permissions
0
 

Author Comment

by:TriumphLTD
ID: 36599829
Hi There,

Thats very close to what I had! I  really need them to be able to create files in there too, would there be anyway of addign that?

Cheers

Dave
0
 
LVL 7

Expert Comment

by:Dusan_Bajic
ID: 36600563
I don't think it is possible. It seems like when you create new file directly in the folder (for example by using Save as... from File menu) what windows actually does is it first create new empty file with given name, and than it adds content, so it basically modifies file. Allowing that will also allow users to later modify that file.  
0
 

Author Comment

by:TriumphLTD
ID: 36707925
Ah I see, that makes sense. I think maybe I wil have to stick with the 3rd party software. Thanks for doing that research, good to know you got the same results as I did!

Thanks again
0
 

Author Comment

by:TriumphLTD
ID: 36890708
Just to update people, there is some free software call sub-version that can do this, also I have a call logged with Microsoft and will post back once they have given me some answers
0
 
LVL 7

Accepted Solution

by:
Dusan_Bajic earned 500 total points
ID: 36890800
Sure, there are lots of versioning and a revision control systems (Subversion being most popular, with many different supported clients, Tortoise is quite popular on windows), they are widely used in software development and they can also work with binary files such as .doc. But I believe they are not that easy to setup for your need and I am not sure that in the end it will be more comfortable to use than previous suggestions.
Of course, give it a try if you have time to spare.
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

by Batuhan Cetin Within the dynamic life of an IT administrator, we hold many information in our minds like user names, passwords, IDs, phone numbers, incomes, service tags, bills and the order from our wives to buy milk when coming back to home.…
I've always wanted to allow a user to have a printer no matter where they login. The steps below will show you how to achieve just that. In this Article I'll show how to deploy printers automatically with group policy and then using security fil…
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.
The Email Laundry PDF encryption service allows companies to send confidential encrypted  emails to anybody. The PDF document can also contain attachments that are embedded in the encrypted PDF. The password is randomly generated by The Email Laundr…

929 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

9 Experts available now in Live!

Get 1:1 Help Now