drnos
  • drnos
  • Herf-A-Holic Topic Starter
Thursday, March 24, 2005 6:44:00 AM
I volunteered for this job, but now it looks like I'm over my head. If someone can help me out, not only would it justify all the time I waste here on company time, but there might even be a nice 5er in it for you!

I need to password protect a directory filled with QC and engineering documents. Only 1 employee should have write access, many employees need read access.

Sounds simple enough?

The workstations all run XP Pro, the files reside on WIN 2000 Server. When I tried altering the Permissions, there was such a convoluted set of groups and users that I ended up locking everyone out! Luckily, I was experimenting on a "Test" directory. Besides, even if I lock all current users out (except the 1 who should have R/W access), what is to prevent the next newly defined user from gaining inadvertent access.

Shouldn't this be easy?

AVB
  • AVB
  • Aficionado
Thursday, March 24, 2005 6:55:00 AM
This should be easy. First make a group with all the people who are allowed to just look at the data. If there is only one that is allowed to modify you don't need to make a group for him but if there is more than one make another group.

On the server use Explorer to go to the folder that has your data. Right click and go to Sharing. Add the group you made and allow it only read permission. Add the user who can change the info and give him full control. Besure to add yourself as Admin or Domain Admin with full control too. Delete the everyone group and any other groups listed who shouldn't be using this folder and that should do it.

If you use scripts you can map the folder to a drive letter for the appropriate users.

drnos
  • drnos
  • Herf-A-Holic Topic Starter
Thursday, March 24, 2005 7:45:00 AM
AVB: So far, so good. I did as you suggested, and my initial tests look good. I have emailed instructions out to most of the work group to try to access a sample document in my protected directory, add their name to the document, and resave it.

Some people should be able to write to it, some should be able to read it only, some should be able to do neither. I am awaiting the results.

Thanks for your prompt help on this. Send your snailer to me at kbccpa

at

sbcglobal net

so I can send you a token.

AVB
  • AVB
  • Aficionado
Tuesday, March 29, 2005 2:14:00 AM
Packagae arrived, thank you very much. I've only had one of the 5 so I get to expand my cigar horizon this week. :thumbs: