How to keep a bat File from being moved by another app?

[Starfishjoe]

How can I fix a file so that no one else can move the file from a specific
folder?

I have a problem at work that was caused by a recent upgrade of an
application. The application occasionally calls a bat file to run on
demand. The bat file is located in a specific folder on a WinXPPro PC :
drive.(Folder name is SCRIPTFILES).

The folder SCRIPTFILES contains scripts and bat files that are either
executed manually or called by other applications to run. The particular
bat file, when called by this app, produces a text file listing all files in
a certain folder (STARTINGFOLDER) prior to these files being moved out of
this folder and processed by this application. When the app calls the bat
file again, the text file is appended to with a new list and the file grows
until the jobs are finished.

This weekend the main application was upgraded. Since then it calls the bat
file on the first run. but after the list is produced by the bat file, and
the files in the STARTINGFOLDER have been processed, the bat file itself
which resides in the folder SCRIPTFILES is also moved to a NEWLY CREATED
FOLDER named ERROR_FILES. Therefore, the next time the app calls this bat
file, it is not there and the list is not generated, but no error is
produced.

This list is important to my job. I cannot get the administrator of the
application to admit the problem is the application yet, and besides, he is
busy working out bugs from other users, so I would have to take a number and
wait in line. Therefore I am forced to take mattters in my own hands. I
need to set permissions on the bat file and the SCRIPTFILES folder so that
no one can move or change the bat file. They should be able to use it, but
not alter or delete or move it.

One problem is the application, also resides on the same PC's C: Drive and
is always logged onto by operators with Administrator Rights, or "all
authority". ( I don't think I can change their authority, but can I exclude
them from certain taking certain actions to my one BAT File, and still allow
the bat file to be used?

Currently the permissions are allow all actions but no actions are denied?
The properties are set to read only for both the file and the SCRIPTFILES
folder.

 

[Guest]

You can move "scripts" to C:\docs & settings\u_n\my docs

Then make "my docs" private.

WC

 

[Starfishjoe]

That would certainly keep the offending application from moving or deleting
the bat file or "script", however this same offending app still has to call
and execute the bat file. If I make it private inside my own "My-docs" as
you suggest, will that not prevent the application from even seeing it and
being able to use it?

The users who logon to this PC and start the offending application (it could
be one of a dozen operators) would be someone other than me. I would need
to make sure the script is available to the application when THEY log on,
not me. I'll come along later and collect the resulting text file lists
after the other guys have left for the day.

Another problem with that is that my documents and settings folder on this
PC would only be good as long as I am in this position or with this company.
If someone else takes my position this would need to change. These scripts
were in a common folder for that reason.

Is there another way to lock down a script but still allow its use?

Starfishjoe