Folder Permissions
We want to create a folder where multiple people can drop a file, overwriting their own file each time while not being able to see what other people drop into the folder. How do we accomplish this?
June 5th, 2010 2:46am

You can use NTFS and Share permissions. If you want to hide the files, you need to create a folder for each user and assign permission to appropriate users. You can’t really hide file names. http://technet.microsoft.com/en-us/library/cc732880.aspx Santhosh Sivarajan | MCTS, MCSE (W2K3/W2K/NT4), MCSA (W2K3/W2K/MSG), CCNA, Network+ Houston, TX http://blogs.sivarajan.com/ http://publications.sivarajan.com/ This posting is provided "AS IS" with no warranties, and confers no rights.
Free Windows Admin Tool Kit Click here and download it now
June 5th, 2010 6:08pm

This is typically called a drop folder. At the share grant authenticated users Change...needed to write files. On the target folder assign Creator Owner only the Write permission. The folder should be empty when you do this. Remove all other user groups. Removing Administrators is optional. Note: Any group (like administrators) assigned more permissions than Write will be able to list files in the folder. Leave SYSTEM applied with Full Control. Any user may drag and drop files into the folder, but will not be able to list file names. Over writing existing files will not be allowed, they must use unique file names. Clicking directly on the folder results in Access Denied, but that is becuase list and read is not granted. They can still copy unique file names to the folder.
June 7th, 2010 1:17am

Hi, Here are several steps we need to do: 1. Cancel inheritable permission option on parent folder. 2. Assign Full Control permission to Everyone (or any user group) to "This folder only" on parent folder. 3. Assign necessary permission (at least read and write) to Creator Owner to "subfolder and files only" on parent folder. And if you would like to hide the files to people who do not have permission, there are 2 articles provided steps above setup ABE in DFS eniroment which may help: How to implement Windows Server 2003 Access-based Enumeration in a DFS environment http://support.microsoft.com/kb/907458 How to enable Access-based Enumeration for a Distributed File System (DFS) share in Windows Server 2008 http://support.microsoft.com/kb/961658
Free Windows Admin Tool Kit Click here and download it now
June 7th, 2010 9:35am

We could not get it to work. The problem we had was that each user needed to update the same file over and over again without being able to see/edit other files in that same folder. We ended up just creating a folder for each user. We did not want to do this because it is not scalable, but we had no other choice.
June 19th, 2010 12:00am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics