If I want to alllow users to see a Excel file (or files in a folder) and save a copy for their own use, but not Delete the file(s) or overwrite them, what Permissions shoud I use?
Or am I better off using a Template?
And why?
Cheers
Rob
If I want to alllow users to see a Excel file (or files in a folder) and save a copy for their own use, but not Delete the file(s) or overwrite them, what Permissions shoud I use?
Or am I better off using a Template?
And why?
Cheers
Rob
The older I get, the faster I was.
you'd deny write permissions on that file - it would mean that they can't update the file though and would have to save the copy in a different location. I assumer this is what you are after ?
my Virtualisation Blog http://jfvi.co.uk Virtualisation Podcast http://vsoup.net
That sounds like it is what I need to do. If the folder or files have Full Permissions to start with, I just Deny Full, then add back all but 'Write' - yes?
The older I get, the faster I was.
nope
deny will always take prsidence.
let the users have change permissions , but deny the write permission to that file or folder ( make sure your account still has full controll )
my Virtualisation Blog http://jfvi.co.uk Virtualisation Podcast http://vsoup.net
Thanks Moby, can you or anyone show me a screen print of how the permissions screen would look?
Cheers
Rob
The older I get, the faster I was.
hang on I'll have to connect to a box at work![]()
my Virtualisation Blog http://jfvi.co.uk Virtualisation Podcast http://vsoup.net
on thinking about it , you dont actually need to deny the write permission - you only need to use deny permissions to ensure they override any other permissions the users have.
ie if they are in a group that grants them full control of the folder
but they are also in a group that has deny write applied to the folder then they cannot write to the folder while they are a memeber of the deny group.
my Virtualisation Blog http://jfvi.co.uk Virtualisation Podcast http://vsoup.net
So if they were in a group, say called hldesign - that has full permissions, I should create a group that is just for the folder I am concerned with? say called hldesigncosts......
Sorry to be thick......
The older I get, the faster I was.
it depends on what you want to protect.
Assuming these protected worksheets live in their own folder you could just remove inheritance from that subfolder , copy the permissions , then remove the write permission to make the folder read only for the hldesign group.
I'd also reccomend that you dont give anyone bar administrators full control. They should never need more than change permissions ( which is full read/write )
my Virtualisation Blog http://jfvi.co.uk Virtualisation Podcast http://vsoup.net
Just what Moby said. Additionally I'd say don't use deny ever. Really, not ever. It's not good practice and even MS recommend you don't do it simply because it can make permissions so hard to troubleshoot in a large environment.Originally Posted by robbiehall
indeed - I can think of only a small handful of times where you want to expliciatly deny access to something . 99% of the time , not granting access is good enough
my Virtualisation Blog http://jfvi.co.uk Virtualisation Podcast http://vsoup.net
Also having general users having full control of anything is a very bad idea - means they can play with permissions themselves, which can cause all kinds of shenanigans. A little knowledge can be a very dangerous thing, and if your current structure is quite complex (though by the sounds of it it isn't!) it could take a long time to rectify any permissions screwed up by users who "know about computers"
Thanks Guys, much appreciated.
Rob
The older I get, the faster I was.
There are currently 1 users browsing this thread. (0 members and 1 guests)