File Security

[W.Kiernan]

I need help with setting permissions on a W2K server.
Currently I have a folder that give the user of this
folder permission of read & execute, list folder contents
and read. The advance permissions are (Allow Special)
create files / write data, create folders / append data,
write attributes, and (another Allow) read & execute with
permissions of traverse folder / execute file, list
folder / read data, read attributes, read extended
attributes, and read permissions. There is a Deny with the
denied permission of write extended attributes.
Since this file has an audit trail embedded in it I cannot
allow the availability for the user to overwrite this
file. What I need to do is allow a user to write a file to
this folder (which it works) and be able to save changes
to this file, which dose not work because of the Deny. I
added the deny because when the user dose “Save As” and
uses an existing filename it deletes all the content in
the existing file and replaces the audit trail with a new
one. So how can I allow users to make changes to a file
but deny “Save As” an existing filename?

 

[Dmitry Korolyov]

You can set more specific permissions at a file level, not at a folder level. Or (which sounds better for me) to place these important files in a separate folder and specify permissions at that folder level.

--
Dmitry Korolyov [[email protected]]
MVP: Windows Server - Active Directory


I need help with setting permissions on a W2K server.
Currently I have a folder that give the user of this
folder permission of read & execute, list folder contents
and read. The advance permissions are (Allow Special)
create files / write data, create folders / append data,
write attributes, and (another Allow) read & execute with
permissions of traverse folder / execute file, list
folder / read data, read attributes, read extended
attributes, and read permissions. There is a Deny with the
denied permission of write extended attributes.
Since this file has an audit trail embedded in it I cannot
allow the availability for the user to overwrite this
file. What I need to do is allow a user to write a file to
this folder (which it works) and be able to save changes
to this file, which dose not work because of the Deny. I
added the deny because when the user dose “Save As” and
uses an existing filename it deletes all the content in
the existing file and replaces the audit trail with a new
one. So how can I allow users to make changes to a file
but deny “Save As” an existing filename?