Windows 7 trying to set-up folder access permissions

[giddyup69]

trying to set-up some specific folder permissions here at work.

on this one folder i would like a specific user to only be able to create files, read them but not be able to modify any existing files.

how do i set-up the folder permissions for this?

>advanced security settings

would it be selecting the following:

-traverse folder/execute file
-list folder/read data
-create files/write data

and then applying it to 'this folder' only?

 

[zvit]

Welcome to the forums!

Go here How to set, view, change, or remove special permissions for files and folders in Windows XP scroll down to see a table of permissions and what each one does. The article is for XP but it is all the same permission categories as in Windows 7 except one.

 

[kaos]

if you wanting to disable access to a file through a batch file so you can enter the path, enter your login name and then enter if you want to grant access to the file or deny then i can make you one?

 

[giddyup69]

thanks for the info.

i'm not looking to disable access completely to a file. i simply want existing files locked down so that no changes can be made to them.

at the link above it states:
[h=4]____________________________
Create Files/Write Data[/h] The Create Files permission applies only to folders and allows or denies the user from creating files in the folder.

The Write Data permission applies only to files and allows or denies the user from making changes to the file and overwriting existing content by NTFS.
_______________________________

this is the area i'm most interested in. i wish to grant the user the ability to create a new file in the designated folder but not allowing them to later modify the file once created.

how do i achieve this? it looks like i want 'Create files' active but 'Write Data' inactive. i'm not sure how to go about this.

 

[zvit]

That's a little tricky because to create and write to a new file is the same permission as modifying. It's like saying, "As long as you created the file, you can modify it until you close it. Once you close it, you loose the permission and can't modify it anymore". I doubt that this can be done with Windows only. I would guess that a third party software for Networking management would be necessary. If you like I can look into it unless I'm mistaken and someone else can tell you how to do it with just Windows.

 

[Adamsappleone]

You may be able to accomplish this through the "Group Policy" feature, unless you're running XP Home.

Here's a Step-by-Step guide to installing GPE in Windows XP Home Edition;

» Windows XP Home Edition: gpedit.msc (group policy) editing via registryAutarchy of the Private Cave

 

[giddyup69]

hi.. thanks for all the help.

i managed to solve this through the advanced security permissions.

i basically had to add the users name twice to the policies.. and 1 policy reflects privileges through folders.. the second reflected privileges through files.

this allowed me toggle the create files/write data options properly.

windows really makes the execution of this too complicated... they really need to clean that section up.