On my WinXP PC I was able to give "write" access without
"read" access by issuing these commands from the Command
Prompt:
cacls c:\Tools /e /t /r users
cacls c:\Tools /e /t /g users:w
cacls c:\tools
C:\tools BUILTIN\Administrators

OI)(CI)F
NT AUTHORITY\SYSTEM

OI)(CI)F
PEGASUS\xxx:F
CREATOR OWNER

OI)(CI)(IO)F
BUILTIN\Users

OI)(CI)(special access

READ_CONTROL
SYNCHRONIZE
FILE_GENERIC_WRITE
FILE_WRITE_DATA
FILE_APPEND_DATA
FILE_WRITE_EA
FILE_EXECUTE
FILE_WRITE_ATTRIBUTES
I do not know if this works under Win2000.
"Dimitris" <(E-Mail Removed)> wrote in message
news:F1231BAD-A259-4CB6-87C9-(E-Mail Removed)...
> Hello pegasus
> Thank you for the advise but I want the xcopy to be able through users
> credencials to write to the destination folder but I dont want the user to
be
> able to have read permission to the destination folder.The users have
write
> permissions enabled for the destination folder but it seems that it is not
> sufficient for the xcopy command
> and I get the"cannot create folder - file" from the xcopy...
>
>
> "Pegasus (MVP)" wrote:
>
> >
> > "Dimitris" <(E-Mail Removed)> wrote in message
> > news:291DCAB2-E3F9-4679-AE4E-(E-Mail Removed)...
> > > Hello I am using log on scripts for my users with xcopy batch files.
> > > The problem is that although I have gave the write permission to the
> > > directory wich the xcopy batch file is pointing the xcopy command
cannot
> > > create files or directories.
> > > I want to backup *.doc and *.xls files from user`s hard disks and the
> > xcopy
> > > logn script is the solution i have thought.Please advise me on the
subject
> > > because the batch file with only write permission is not working and I
> > dont
> > > want the users to be able to read each other files ...
> >
> > If you want a user's logon script to copy files to a folder that
> > us supposed to be inaccessible to users in general then you
> > must employ an agent to do it in a two-step process:
> >
> > Step 1: Get the logon script to copy the files to a holding area
> > to which the user has full access.
> >
> > Step 2: Use a scheduled task to move the files from the holding
> > area to the final restricted area. Make the task run under an
> > account that has sufficient access rights to both areas.
> >
> >
> >