NTFS solution for true read-only access
How would this be achieved via NTFS on a file share/directory.I need to setup what we call a “holding
read-only directory”.
One user needs access to write excel reports to this directory, and all others require read-only access to this directory. By read-only it would be best if they could only
read this document while it’s in that directory, and not be able to take a copy away and save it elsewhere.
Also, not sure if possible, but I ideally the person who writes the file to this directory should not be able to edit it once it is saved in this directory. Sort of like
“drop it off” but then they too only have read-only access to it, and again – ideally only true read-only
- where they cant copy it away elsewhere.
Would be great if you could provide a solution as opposed to a link to how NTFS works. I have been reading such all day.
Thanks
Cb
July 29th, 2011 10:48am
I will still suggest to you to go forth and read up on Windows File Seucurity, creating shares and permissions, there is no way around not needing to learn that to help yourself.
The 30 second guestimate: Right click folder, sharing tab, share permissions, everyone read. Under security tab add bubba joe (the file writer) with modify, or full control if they need to remove file.
You can get more granular and nitpiky if you want, but you do need to read up on managing shares and permissions, Bing! it, there is plenty of good information out there.
-- :P Advice offered, If you need more help it is advised to seek the council and advice of paid professionals. The answer is always 42, or reboot.
Free Windows Admin Tool Kit Click here and download it now
July 29th, 2011 10:59am
while you can restrict users to only read the directory, with read rights they are able to copy the files. there is no solution (i am aware of) just based on ntfs to avoid this. there are third party solutions (DRM) out there, though I have no experience
with them
July 29th, 2011 1:48pm
Even with DRM, you can still screen cap and in some cases "copy and paste" information out to text files.-- :P Advice offered, If you need more help it is advised to seek the council and advice of paid professionals. The answer is always 42, or reboot.
Free Windows Admin Tool Kit Click here and download it now
July 29th, 2011 3:58pm
Hello,
you may be able to achieve the copy prevention with using rights management for office which requires additional services/applications to be used.
http://technet.microsoft.com/en-us/library/cc771234(WS.10).aspx
http://office.microsoft.com/en-us/word-help/information-rights-management-in-office-2010-HA010354260.aspx
On the share/NTFS permissions of folders/files this is not possible.Best regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.
July 30th, 2011 3:20pm
if they could only read this document while it’s in that directory, and not be able to take a copy away and save it elsewhere.
If users have read permissions to the file, they can copy the file. There is not way to prevent that using NTFS permissions.
I ideally the person who writes the file to this directory should not be able to edit it once it is saved in this directory
This type of configuration is called a "Drop Folder".
http://msdn.microsoft.com/en-us/library/bb778394.aspx
Free Windows Admin Tool Kit Click here and download it now
July 31st, 2011 12:55am


