Results 1 to 13 of 13

Thread: W2K3 Permissions

  1. #1
    Member
    Join Date
    Aug 2003
    Location
    Wellingborough, Northants
    Posts
    158
    Thanks
    7
    Thanked
    0 times in 0 posts

    W2K3 Permissions

    If I want to alllow users to see a Excel file (or files in a folder) and save a copy for their own use, but not Delete the file(s) or overwrite them, what Permissions shoud I use?
    Or am I better off using a Template?
    And why?

    Cheers
    Rob
    The older I get, the faster I was.

  2. #2
    Administrator Moby-Dick's Avatar
    Join Date
    Jul 2003
    Location
    There's no place like ::1 (IPv6 version)
    Posts
    10,665
    Thanks
    53
    Thanked
    385 times in 314 posts
    you'd deny write permissions on that file - it would mean that they can't update the file though and would have to save the copy in a different location. I assumer this is what you are after ?
    my Virtualisation Blog http://jfvi.co.uk Virtualisation Podcast http://vsoup.net

  3. #3
    Member
    Join Date
    Aug 2003
    Location
    Wellingborough, Northants
    Posts
    158
    Thanks
    7
    Thanked
    0 times in 0 posts
    That sounds like it is what I need to do. If the folder or files have Full Permissions to start with, I just Deny Full, then add back all but 'Write' - yes?
    The older I get, the faster I was.

  4. #4
    Administrator Moby-Dick's Avatar
    Join Date
    Jul 2003
    Location
    There's no place like ::1 (IPv6 version)
    Posts
    10,665
    Thanks
    53
    Thanked
    385 times in 314 posts
    nope
    deny will always take prsidence.

    let the users have change permissions , but deny the write permission to that file or folder ( make sure your account still has full controll )
    my Virtualisation Blog http://jfvi.co.uk Virtualisation Podcast http://vsoup.net

  5. #5
    Member
    Join Date
    Aug 2003
    Location
    Wellingborough, Northants
    Posts
    158
    Thanks
    7
    Thanked
    0 times in 0 posts
    Thanks Moby, can you or anyone show me a screen print of how the permissions screen would look?

    Cheers
    Rob
    The older I get, the faster I was.

  6. #6
    Administrator Moby-Dick's Avatar
    Join Date
    Jul 2003
    Location
    There's no place like ::1 (IPv6 version)
    Posts
    10,665
    Thanks
    53
    Thanked
    385 times in 314 posts
    hang on I'll have to connect to a box at work
    my Virtualisation Blog http://jfvi.co.uk Virtualisation Podcast http://vsoup.net

  7. #7
    Administrator Moby-Dick's Avatar
    Join Date
    Jul 2003
    Location
    There's no place like ::1 (IPv6 version)
    Posts
    10,665
    Thanks
    53
    Thanked
    385 times in 314 posts


    on thinking about it , you dont actually need to deny the write permission - you only need to use deny permissions to ensure they override any other permissions the users have.

    ie if they are in a group that grants them full control of the folder
    but they are also in a group that has deny write applied to the folder then they cannot write to the folder while they are a memeber of the deny group.
    my Virtualisation Blog http://jfvi.co.uk Virtualisation Podcast http://vsoup.net

  8. #8
    Member
    Join Date
    Aug 2003
    Location
    Wellingborough, Northants
    Posts
    158
    Thanks
    7
    Thanked
    0 times in 0 posts
    So if they were in a group, say called hldesign - that has full permissions, I should create a group that is just for the folder I am concerned with? say called hldesigncosts......

    Sorry to be thick......
    The older I get, the faster I was.

  9. #9
    Administrator Moby-Dick's Avatar
    Join Date
    Jul 2003
    Location
    There's no place like ::1 (IPv6 version)
    Posts
    10,665
    Thanks
    53
    Thanked
    385 times in 314 posts
    it depends on what you want to protect.
    Assuming these protected worksheets live in their own folder you could just remove inheritance from that subfolder , copy the permissions , then remove the write permission to make the folder read only for the hldesign group.

    I'd also reccomend that you dont give anyone bar administrators full control. They should never need more than change permissions ( which is full read/write )
    my Virtualisation Blog http://jfvi.co.uk Virtualisation Podcast http://vsoup.net

  10. #10
    Senior Member
    Join Date
    Nov 2005
    Posts
    500
    Thanks
    0
    Thanked
    0 times in 0 posts
    Quote Originally Posted by robbiehall
    If I want to alllow users to see a Excel file (or files in a folder) and save a copy for their own use, but not Delete the file(s) or overwrite them, what Permissions shoud I use?
    Just what Moby said. Additionally I'd say don't use deny ever. Really, not ever. It's not good practice and even MS recommend you don't do it simply because it can make permissions so hard to troubleshoot in a large environment.

  11. #11
    Administrator Moby-Dick's Avatar
    Join Date
    Jul 2003
    Location
    There's no place like ::1 (IPv6 version)
    Posts
    10,665
    Thanks
    53
    Thanked
    385 times in 314 posts
    indeed - I can think of only a small handful of times where you want to expliciatly deny access to something . 99% of the time , not granting access is good enough
    my Virtualisation Blog http://jfvi.co.uk Virtualisation Podcast http://vsoup.net

  12. #12
    Splash
    Guest
    Also having general users having full control of anything is a very bad idea - means they can play with permissions themselves, which can cause all kinds of shenanigans. A little knowledge can be a very dangerous thing, and if your current structure is quite complex (though by the sounds of it it isn't!) it could take a long time to rectify any permissions screwed up by users who "know about computers"

  13. #13
    Member
    Join Date
    Aug 2003
    Location
    Wellingborough, Northants
    Posts
    158
    Thanks
    7
    Thanked
    0 times in 0 posts
    Thanks Guys, much appreciated.

    Rob
    The older I get, the faster I was.

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Similar Threads

  1. W2K3 - services depending on Administrator
    By robbiehall in forum Software
    Replies: 3
    Last Post: 13-02-2006, 09:20 PM
  2. Crazy XP Pro Permissions Problem
    By herulach in forum Software
    Replies: 1
    Last Post: 15-12-2005, 05:20 PM
  3. Linux folder permissions
    By Stubzz in forum Software
    Replies: 10
    Last Post: 18-05-2004, 06:15 PM
  4. Do Users Have Permissions On This Forum?
    By 3Dfx in forum General Discussion
    Replies: 16
    Last Post: 25-12-2003, 12:54 AM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •