How to set read only permission on all photos for all users
- Thread starter Shumboom
- Start date
Without knowing how you and others are actually accessing the NAS (browsing to network share or shortcut, mapping a network drive, etc.,) and what format (Fat32 or NTFS) the NAS drive(s) are it is difficult to suggest how you might proceed.
If NTFS you will likely have to edit the NTFS Permissions (Security Tab) in the properties of the folder, individually per user, in the properties of the parent folder by clicking the Advanced button there. And in order to do this successfully you will likely need to break inheritance of that folder from its' parent container by clicking the Change Permissions button and unchecking the box that says Include inheritable permissions from this object's parent (be sure to click the Add button when prompted and not the Remove button or you'll be left with adding back in all your users and groups)
Then you should be able to edit the individual NTFS Security Permissions as you desire (Do not mess with accounts you do not want to manage like SYSTEM or NETWORK, etc., leave them as is).
You can add users or edit existing user permissions from there and for your read only guys you'll want to Allow:
Read Permissions, Traverse folder / execute file, List folder / read data. Make sure you leave one account, presumably yours with full permissions (otherwise you are going to have to go back and take ownership of the folder and start over) and make sure you check the box at the bottom that says Apply these permissions to objects and or containers within the container only. And if you are going to want other to be able to save images to this container they are going to need write permissions, Create Files / Write Data and Create Folders / Append Data.
Perhaps if you are only looking to protect the files and folders from accidental or malicious deletion then an explicit deny check (Delete and Delete subfolders and files) might work better for you, although I have never found it too beneficial to use explicit denies when setting NTFS Permissions.
And you'll want to make sure that no one other than yourself has Change Permissions and Take Ownership to the container.
This is not simple or easy and can result in unintended consequences if not done properly. That's why I normally suggest using a test folder with a single image in it and performing the above action on that folder and determine if the results are as you expect.
Regards
Randy
If NTFS you will likely have to edit the NTFS Permissions (Security Tab) in the properties of the folder, individually per user, in the properties of the parent folder by clicking the Advanced button there. And in order to do this successfully you will likely need to break inheritance of that folder from its' parent container by clicking the Change Permissions button and unchecking the box that says Include inheritable permissions from this object's parent (be sure to click the Add button when prompted and not the Remove button or you'll be left with adding back in all your users and groups)
Then you should be able to edit the individual NTFS Security Permissions as you desire (Do not mess with accounts you do not want to manage like SYSTEM or NETWORK, etc., leave them as is).
You can add users or edit existing user permissions from there and for your read only guys you'll want to Allow:
Read Permissions, Traverse folder / execute file, List folder / read data. Make sure you leave one account, presumably yours with full permissions (otherwise you are going to have to go back and take ownership of the folder and start over) and make sure you check the box at the bottom that says Apply these permissions to objects and or containers within the container only. And if you are going to want other to be able to save images to this container they are going to need write permissions, Create Files / Write Data and Create Folders / Append Data.
Perhaps if you are only looking to protect the files and folders from accidental or malicious deletion then an explicit deny check (Delete and Delete subfolders and files) might work better for you, although I have never found it too beneficial to use explicit denies when setting NTFS Permissions.
And you'll want to make sure that no one other than yourself has Change Permissions and Take Ownership to the container.
This is not simple or easy and can result in unintended consequences if not done properly. That's why I normally suggest using a test folder with a single image in it and performing the above action on that folder and determine if the results are as you expect.
Regards
Randy
Wow this looks so complex! All I want is to make the files look as if they are on dvds, ie even I would not be able to accidentally erase the files unless i explicitly changed permissions on the files.
In answer to your questions the NAS is NTFS and I have mapped it as the Z drive. I will have a go at your 'deny' solution on a temp folder in the meantime.
thanks,Shumit
In answer to your questions the NAS is NTFS and I have mapped it as the Z drive. I will have a go at your 'deny' solution on a temp folder in the meantime.
thanks,Shumit
Just tried most of these settings for 'everyone' and absolutely nothing works. Whatever permissions I set look as if they have taken effect but when I return to properties there are no settings applied.
It works fine on my computers' hard drive so it is a NAS related problem. Should I look at icacls?
It works fine on my computers' hard drive so it is a NAS related problem. Should I look at icacls?
If the NAS is truly an NTFS volume and it must be because otherwise (fat32) you wouldn't have a security tab in the folder properties. Then setting NTFS permissions should be all you need to do. When share permissions and NTFS security permissions are combined the most restrictive one applies and an explicit deny over rules any and all allows and wins everytime.
You can read this for a more in-depth explanation.
TechExams.Net - MCSA/MCSE 70-290 TechNotes: Shared Folder and NTFS Permissions
You can read this for a more in-depth explanation.
TechExams.Net - MCSA/MCSE 70-290 TechNotes: Shared Folder and NTFS Permissions
It is a dlink - dns 323 set up with RAID 1 - it comes with some software to set it up but not for setting up permissions etc. I have it mapped as my Z drive so I use it from windows. I have looked on the relevant forum and most people are talking about linux permissions. If I cant get my answer here I will post there but Im not sureI'll understand the answer.
This website is not affiliated, owned, or endorsed by Microsoft Corporation. It is a member of the Microsoft Partner Program.