Permissions Help server 2003
I have permissions set up so that a user has modify access to their own folder & files. The everyone group has read write. Now I wanted everyone to be able to open and edit each others docs but not delete, only delete documents that they created. So I gave the everyone group special permissions create files / write data, create folders / append data. This was working fine until I realised that office temp files were accumulating as the everyone did not have permission to delete them unless it was their own folder. To fix this I gave the creator owner group modify access at the folder level and this has been working great for a couple of years. This is while we have had office 2003. However we recently started using Office 2007 which does not seem to like these permissions. If a user trys to edit another persons document, when they click save they get access denied and are forced to save another copy. I have played with the permissions but I cannot get it to work as it did in office 2003. The only way to allow users to edit each others documents now is to give everyone the modify permission which is not what I want as this also gives the permission delete the other users documents. Has anyone else come across this and found a solution?
January 22nd, 2010 5:49pm
unfortunately this is by default. In Office the behavior is to delete original file and save temp file as original file. This means that if you want to save existing documents you need to grant Delete permissions.
http://www.sysadmins.lv
Free Windows Admin Tool Kit Click here and download it now
January 22nd, 2010 7:39pm
Hello,
Other than the NTFS permissions, for Office applications you may consider to deploy ADRMS (Active Directory Rights Management Services) to content-level protection. Content owners can define who can open, modify, print, forward, or take other actions with the information. For detailed information about ADRMS, you may refer to:
Active Directory Rights Management Services
http://technet.microsoft.com/en-us/library/cc771234(WS.10).aspx
If you have any questions or concerns, please do not hesitate to let me know.
January 25th, 2010 9:58am
Thanks for the response. Is this a change in the way Office 2007 does it compared to Office 2003? It is not an issue with 2003 as long as the creator owner group has modify.
Free Windows Admin Tool Kit Click here and download it now
January 25th, 2010 12:50pm


