NTFS File Permissions

[Craig]

Hi,

I have a problem with Windows 2000 File Permissions. I need a folder to which users can save Microsoft Word Documents but cannot delete them.

Having looked at past items on various forums, this problem has been addressed a number of times but thus far no-one has provided an adequate solution. For this reason I will try to give as much detail as to what the problem is and the solutions that don't work.

OK, I need a network folder that users can save hardcopies of documents into (eg, letters to customers) but cannot be accidently deleted once they are in there.

The following basic folder permission permutations do not work:

Full Control - Users can still delete docs.
Modify - users can still delete docs.
Read&Execute and lower - Users cannot delete but they also cannot save documents .

So next we go to more granular permissions by clicking on the advanced button.

Deny Delete and Delete files and subfolders - users cannot save using Microsoft Word. The error message 'The folder is marked as read-only appears.
Deny delete - users can save files but they can also delete them.
Deny delete files and sub folders - users can save files but can also delete them.

The same is true if you just clear the access checkbox (as opposed to explicitly denying access).
It is also true whether you set permissions on just the folder, just the files or folders and files.

I have difficulty believing that Microsoft would not have addressed this but can find nothing regarding this specific problem on their website. It seems that you cannot allow a user to save documents directly to a folder without also giving them delete rights.

I must add that the problem seems to be specific when saving from Microsoft Office as when denying delete and delete files nd sub folders permissions it is possible to create new folders and new text documents using notepad but it doesn't save from MS Word.

I'm sure someone out there must have an answer to this problem which is driving me nuts. Sorry the message is a bit long-winded but I wanted to give a thorough description of the problem to avoid unspecific replies.

I awit eagerly for a response.

Thanks in Advance

Craig

[G]

------------
Craig at 11/12/2002 11:29:49 AM

Hi,

I have a problem with Windows 2000 File Permissions. I need a folder to which users can save Microsoft Word Documents but cannot delete them.

Having looked at past items on various forums, this problem has been addressed a number of times but thus far no-one has provided an adequate solution. For this reason I will try to give as much detail as to what the problem is and the solutions that don't work.

OK, I need a network folder that users can save hardcopies of documents into (eg, letters to customers) but cannot be accidently deleted once they are in there.

The following basic folder permission permutations do not work:

Full Control - Users can still delete docs.
Modify - users can still delete docs.
Read&Execute and lower - Users cannot delete but they also cannot save documents .

So next we go to more granular permissions by clicking on the advanced button.

Deny Delete and Delete files and subfolders - users cannot save using Microsoft Word. The error message 'The folder is marked as read-only appears.
Deny delete - users can save files but they can also delete them.
Deny delete files and sub folders - users can save files but can also delete them.

The same is true if you just clear the access checkbox (as opposed to explicitly denying access).
It is also true whether you set permissions on just the folder, just the files or folders and files.

I have difficulty believing that Microsoft would not have addressed this but can find nothing regarding this specific problem on their website. It seems that you cannot allow a user to save documents directly to a folder without also giving them delete rights.

I must add that the problem seems to be specific when saving from Microsoft Office as when denying delete and delete files nd sub folders permissions it is possible to create new folders and new text documents using notepad but it doesn't save from MS Word.

I'm sure someone out there must have an answer to this problem which is driving me nuts. Sorry the message is a bit long-winded but I wanted to give a thorough description of the problem to avoid unspecific replies.

I awit eagerly for a response.

Thanks in Advance

Craig

[Gabriel M. Lesser]

Do you want them to have just DROP capabilities? Do you need them to be able to open the file as well? If you want them to just drop the files then do this:

Create two seperate Security Schemes:

Say the group is called "Group Drop Box"

Give the following rights to the folder and subfolders only:

Create Files/Write Data
Create Folders / Append Data
Write Attributes
Write Extended Attributes
Read Permissions

THEN GIVE THE FOLLOWING RIGHTS TO FILES ONLY:

Create Files/Write Data
Create Folders / Append Data
Write Attributes
Write Extended Attributes

This will work as a tradition MACINTOSH drop folder.

------------
Craig at 11/12/2002 11:29:49 AM

Hi,

I have a problem with Windows 2000 File Permissions. I need a folder to which users can save Microsoft Word Documents but cannot delete them.

Having looked at past items on various forums, this problem has been addressed a number of times but thus far no-one has provided an adequate solution. For this reason I will try to give as much detail as to what the problem is and the solutions that don't work.

OK, I need a network folder that users can save hardcopies of documents into (eg, letters to customers) but cannot be accidently deleted once they are in there.

The following basic folder permission permutations do not work:

Full Control - Users can still delete docs.
Modify - users can still delete docs.
Read&Execute and lower - Users cannot delete but they also cannot save documents .

So next we go to more granular permissions by clicking on the advanced button.

Deny Delete and Delete files and subfolders - users cannot save using Microsoft Word. The error message 'The folder is marked as read-only appears.
Deny delete - users can save files but they can also delete them.
Deny delete files and sub folders - users can save files but can also delete them.

The same is true if you just clear the access checkbox (as opposed to explicitly denying access).
It is also true whether you set permissions on just the folder, just the files or folders and files.

I have difficulty believing that Microsoft would not have addressed this but can find nothing regarding this specific problem on their website. It seems that you cannot allow a user to save documents directly to a folder without also giving them delete rights.

I must add that the problem seems to be specific when saving from Microsoft Office as when denying delete and delete files nd sub folders permissions it is possible to create new folders and new text documents using notepad but it doesn't save from MS Word.

I'm sure someone out there must have an answer to this problem which is driving me nuts. Sorry the message is a bit long-winded but I wanted to give a thorough description of the problem to avoid unspecific replies.

I awit eagerly for a response.

Thanks in Advance

Craig