Advanced Share Permissions question

[Philippe Prosper]

I have an application which accesses files on a windows
2000 server using a UNC path (
\\myserver\MyFolder\filename.dat")

Is it possible to configure the permissions on the share
so the users can still access the files using the
application while at the same time preventing the users
from browsing the folder ?

A hidden share would not be a solution since a user will
still be able to access the folder by typing it's URL.

TIA.

 

[splatter]

I have an application which accesses files on a windows
2000 server using a UNC path (
\\myserver\MyFolder\filename.dat")

Is it possible to configure the permissions on the share
so the users can still access the files using the
application while at the same time preventing the users
from browsing the folder ?

Disable simple file sharing
For the user your trying to do this with, turn off List folder contents,
turn on read & execute.

hth

DP

 

[Philippe Prosper]

Thanks but ...
I'm trying to do that on a Win2000 server. Simple file
sharing won't apply here.
Turning on "Read & Execute" automatically turns on "list
folder content"

 

[splatter]

Thanks but ...
I'm trying to do that on a Win2000 server. Simple file
sharing won't apply here.
Turning on "Read & Execute" automatically turns on "list
folder content"

Woops sorry I'm on both XP and 2000 groups.. got confused which I was
answering

Goto the security tab highlight the use and click on the advanced button

Check off "transverse folder / execute file"
from Help "Traverse Folder allows or denies moving through folders to reach
other files or folders, even if the user has no permissions for the
traversed folders (applies to folders only). Traverse folder takes effect
only when the group or user is not granted the Bypass traverse checking user
right in the Group Policy snap-in. (By default, the Everyone group is given
the Bypass traverse checking user right.) Execute File allows or denies
running program files (applies to files only). Setting the Traverse Folder
permission on a folder does not automatically set the Execute File
permission on all files within that folder. "

Uncheck " list folder/ read data"

From help "List Folder allows or denies viewing file names and subfolder
names within the folder (applies to folders only). Read Data allows or
denies viewing data in files (applies to files only)."

Click ok and you should be set. Note though it will look like the user has
no permissions until you go back into the advanced tab.
HTH
DP

 

[splatter]

Goto the security tab highlight the use and click on the advanced button

Check off "transverse folder / execute file"
from Help "Traverse Folder allows or denies moving through folders to reach
other files or folders, even if the user has no permissions for the
traversed folders (applies to folders only). Traverse folder takes effect
only when the group or user is not granted the Bypass traverse checking user
right in the Group Policy snap-in. (By default, the Everyone group is given
the Bypass traverse checking user right.) Execute File allows or denies
running program files (applies to files only). Setting the Traverse Folder
permission on a folder does not automatically set the Execute File
permission on all files within that folder. "

Uncheck " list folder/ read data"

From help "List Folder allows or denies viewing file names and subfolder
names within the folder (applies to folders only). Read Data allows or
denies viewing data in files (applies to files only)."

Click ok and you should be set. Note though it will look like the user has
no permissions until you go back into the advanced tab.

Damn it sorry man this is why I shouldn't post before I go eat lunch.
After you do the above you may have to goto the specific exe, or any
applicable data files, in advanced and allow read data. Since otherwise you
will probably break the application if the user can't needed data.

HTH
DP

 

[splatter]

Thank a lot ... that did the trick. I had gone thru the
help files but got confused as to wich permision setting
to use.
Again thanks a lot

No problem Phillip glad I could help.
DP