file permissions

Hello,

We have a few files in a particular folder which we would like to have
clients access as read only.

Wen i apply the read attributes to the folder the clients can see the
entire contents of the folder. I have tried applying the read attibute to the
individual files only but the clients still cant access the file unless i
give them the read permission at the folder level.

is it possible in SBS 2003 to apply permissions to the individual file as
opposed to the entire folder?

 

"bill" <bill@discussions.microsoft.com> wrote in message
news:BF8878DE-70CB-40E7-A40A-076DA4CEECA7@microsoft.com...<!--coloro:blue--><span style="color:blue <!--/coloro-->
> Hello,
>
> We have a few files in a particular folder which we would like to have
> clients access as read only.
>
> Wen i apply the read attributes to the folder the clients can see the
> entire contents of the folder. I have tried applying the read attibute to
> the
> individual files only but the clients still cant access the file unless i
> give them the read permission at the folder level.
>
> is it possible in SBS 2003 to apply permissions to the individual file as
> opposed to the entire folder?<!--colorc--><!--/colorc-->


SBS works exactly like regular Windows when it comes to permissions. The
NTFS system controls that.

I'm not sure what you're trying to achieve based on your description. You
are saying you want clients to have Read Only. You provided Read Only at the
parent folder, and hence it provided what the permission you told it to do.
It provided Read Only into the whole child structure. This is of course
provided that you remove any other groups that may have more than Read
permissions, such as the Everyone, Domain Users, or Authenticated users, and
only apply Read to the group you want to have Read access, unless you want
to provide it to Authenticated Users (which is recommended over "Everyone").

So they got Read.

Do you not want them to have Read? Or do you want a specific user to see
only one file in the structure and not the other files?

Please elaborate on exactly what you want to achieve, the group you want to
apply it to, are they accessing it directly, or through a Share across the
network, as in a mapped drive.

If coming through a Share, it changes the picture, because the Share perms
and the NTFS perms are evaluated together to provide the overall effective
permissions.

Please provide the Share Permissions, and the NTFS (security tab)
permissions, that is on the folder. The following is a suggested example:

Share name = Company Data
Authenticated Users = Read
Domain Administrators = FC

NTFS permissions:
Authenticated Users = Read
Domain Admins = FC
System = FC

--
Ace

This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.

Please reply back to the newsgroup or forum to benefit from collaboration
among responding engineers, and to help others benefit from your resolution.

Ace Fekay, MCT, MCTS Exchange, MCSE, MCSA 2003 & 2000, MCSA Messaging
Microsoft Certified Trainer

For urgent issues, please contact Microsoft PSS directly. Please check
for regional support phone numbers.

 

Hi,

thanks for the response.
What i am trying to achieve is I want a specific user to see
only one file in the structure and not the other files.

The file i wish to have read only access to is located in a folder on the
domain controller.

on the domain cotroller i have set the read only attribute for this
individual user only. The file is being accessed via a short cut to the unc
path oto the file (eg. \\server\sharedfile\sharedfile.doc)

on the domain controller if i uncheck list folder contents but check read
permissions i cant open the docuemnt. when i have all read permissions and
list folder contents checked i can access the file as read only but i can
also list the other files within the folder. the same applies irrespective if
i apply these to the file or folder.

Is there a way that i can open the document as read only without giving the
users access to the other files in the folder?

thanks,

Bill.


"Ace Fekay [MCT]" wrote:
<!--coloro:blue--><span style="color:blue <!--/coloro-->
> "bill" <bill@discussions.microsoft.com> wrote in message
> news:BF8878DE-70CB-40E7-A40A-076DA4CEECA7@microsoft.com...<!--coloro:green--><span style="color:green <!--/coloro-->
> > Hello,
> >
> > We have a few files in a particular folder which we would like to have
> > clients access as read only.
> >
> > Wen i apply the read attributes to the folder the clients can see the
> > entire contents of the folder. I have tried applying the read attibute to
> > the
> > individual files only but the clients still cant access the file unless i
> > give them the read permission at the folder level.
> >
> > is it possible in SBS 2003 to apply permissions to the individual file as
> > opposed to the entire folder?<!--colorc--><!--/colorc-->
>
>
> SBS works exactly like regular Windows when it comes to permissions. The
> NTFS system controls that.
>
> I'm not sure what you're trying to achieve based on your description. You
> are saying you want clients to have Read Only. You provided Read Only at the
> parent folder, and hence it provided what the permission you told it to do.
> It provided Read Only into the whole child structure. This is of course
> provided that you remove any other groups that may have more than Read
> permissions, such as the Everyone, Domain Users, or Authenticated users, and
> only apply Read to the group you want to have Read access, unless you want
> to provide it to Authenticated Users (which is recommended over "Everyone").
>
> So they got Read.
>
> Do you not want them to have Read? Or do you want a specific user to see
> only one file in the structure and not the other files?
>
> Please elaborate on exactly what you want to achieve, the group you want to
> apply it to, are they accessing it directly, or through a Share across the
> network, as in a mapped drive.
>
> If coming through a Share, it changes the picture, because the Share perms
> and the NTFS perms are evaluated together to provide the overall effective
> permissions.
>
> Please provide the Share Permissions, and the NTFS (security tab)
> permissions, that is on the folder. The following is a suggested example:
>
> Share name = Company Data
> Authenticated Users = Read
> Domain Administrators = FC
>
> NTFS permissions:
> Authenticated Users = Read
> Domain Admins = FC
> System = FC
>
> --
> Ace
>
> This posting is provided "AS-IS" with no warranties or guarantees and
> confers no rights.
>
> Please reply back to the newsgroup or forum to benefit from collaboration
> among responding engineers, and to help others benefit from your resolution.
>
> Ace Fekay, MCT, MCTS Exchange, MCSE, MCSA 2003 & 2000, MCSA Messaging
> Microsoft Certified Trainer
>
> For urgent issues, please contact Microsoft PSS directly. Please check
> for regional support phone numbers.
>
> <!--colorc--><!--/colorc-->

 

"bill" <bill@discussions.microsoft.com> wrote in message
news:F2EA54B7-448D-43CD-8ED3-41914722D0B1@microsoft.com...<!--coloro:blue--><span style="color:blue <!--/coloro-->
> Hi,
>
> thanks for the response.
> What i am trying to achieve is I want a specific user to see
> only one file in the structure and not the other files.
>
> The file i wish to have read only access to is located in a folder on the
> domain controller.
>
> on the domain cotroller i have set the read only attribute for this
> individual user only. The file is being accessed via a short cut to the
> unc
> path oto the file (eg. \serversharedfilesharedfile.doc)
>
> on the domain controller if i uncheck list folder contents but check read
> permissions i cant open the docuemnt. when i have all read permissions and
> list folder contents checked i can access the file as read only but i can
> also list the other files within the folder. the same applies irrespective
> if
> i apply these to the file or folder.
>
> Is there a way that i can open the document as read only without giving
> the
> users access to the other files in the folder?
>
> thanks,
>
> Bill.<!--colorc--><!--/colorc-->

Ok, that makes more sense. You want this one user to see one specific file
in the folder.

In the folder permissions, Advanced, add the user in there, and click Edit,
check Traverse Folder. Hit ok a few times to get out. Then only on that
file, go into its permissions and give the user Read. Make sure that there
are no groups set either in the folder or any of the other files in the
folder that the user may be a member of that may be providing additional
permissions, and this includes Everyone, Domain users, Users, Auth Users,
etc..

Ace