How to create read-only user account on windows 2012 (work group) server

Hi,

I need to create a read-only user account on windows 2012 server. It is in workgroup.
When i create a standard user, its allowing to see only folders and files. I need the user to see application setup on IIS webserver but should not be allowed to modify. Please suggest.
anuboggaramAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

JohnBusiness Consultant (Owner)Commented:
Users are users. Set up permissions to folder groups only to the people who should have access.

You can set up organizational groups in Users and Groups and provide access to folders by group.

For one group, you could allow read-only access for the folder just to that group.

Think it through - it will work.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
arnoldCommented:
Is the access restriction deals with a web based accessed application?
Not quite sure what you are looking to achieve given the conflicting request.
You want to allow user access to the setup of an IIS application, but you want to deny them modification rights.

To what end and what do you expect a user to do on the setup of the application side while preventing the modification of the source/processed files making the application?

To access the web server based application, a user does not need access to the server on which it runs.
0
Lionel MMSmall Business IT ConsultantCommented:
I don't know workgroup server settings all that well but I suggest you try making the user a member of the "guest"group  (make sure they are not part of other groups that give them other rights too) and see if that suits your needs or not.
0
Simplify Active Directory Administration

Administration of Active Directory does not have to be hard.  Too often what should be a simple task is made more difficult than it needs to be.The solution?  Hyena from SystemTools Software.  With ease-of-use as well as powerful importing and bulk updating capabilities.

anuboggaramAuthor Commented:
I've requested that this question be deleted for the following reason:

no self solution found.
0
JohnBusiness Consultant (Owner)Commented:
No solution found because you CANNOT create a read-only user account.
0
anuboggaramAuthor Commented:
Yes, as the server not a domain member, its not possible to create groups or organizational units.
0
JohnBusiness Consultant (Owner)Commented:
You can use folder permissions by user to do what you want.

But if truly you cannot do this, then we said that as well.
0
Lionel MMSmall Business IT ConsultantCommented:
Yes but you can create a user as a guest and see if that guest rights does what you want and if not you can use local group policy to restrict any user even further and if you don't want them to see certain files/folders that can be done by using file/folder permissions.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2012

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.