Folder/File Permissions

Folder/File Permissions

Secure Home | Search | About
 Microsoft Applications Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
Folder/File Permissions Schoolguy 04-21-2006
Posted by =?Utf-8?B?U2Nob29sZ3V5?= on April 21, 2006, 10:05 am
If you were  Registered and logged in, you could reply and use other advanced thread options
Hello Everyone,
I work in 4 Elementary schools. We are running Windows Server 2003 with
98SE, 2000 and XP Pro workstations. We have a shared folder on each school
server, called "Grade" where the students save all of their work. We want to
prevent the students from moving, renaming and deleting the folders, but at
the same time enable them to save their files and changes to files in that
folder. I have tried many combinations with the security permissions on the
folder, but it seems to always come up as all or none. I.E. if I uncheck
"create folders/append data" they can not even save new files in the folder,
etc. Are there any option?

Thanks
GP

Posted by Mircea Ion on April 21, 2006, 10:48 am
If you were  Registered and logged in, you could reply and use other advanced thread options
It's a no win situation unless you create individual folders for every
student.
However my advice is: Don't give them access directly to the folders. Put
something between them and the file system.
Create a small web application or any kind of application that authenticates
the user and give the user a chance to upload his files. This "Front End"
application will be in charge of saving the files based on some user input.

Everything will become simpler because everything users see is a nice input
dialog box or web page without the need to navigate the LAN.

IMHO.


> Hello Everyone,
> I work in 4 Elementary schools. We are running Windows Server 2003 with
> 98SE, 2000 and XP Pro workstations. We have a shared folder on each school
> server, called "Grade" where the students save all of their work. We want
> to
> prevent the students from moving, renaming and deleting the folders, but
> at
> the same time enable them to save their files and changes to files in that
> folder. I have tried many combinations with the security permissions on
> the
> folder, but it seems to always come up as all or none. I.E. if I uncheck
> "create folders/append data" they can not even save new files in the
> folder,
> etc. Are there any option?
>
> Thanks
> GP



Posted by Roger Abell [MVP] on April 21, 2006, 10:54 am
If you were  Registered and logged in, you could reply and use other advanced thread options
No, you have no solution at least as long as you want to keep
"enable . . . changes to files in that folder"
If you could drop that part, so that you provide a pure drop-box
(i.e. one chance, do not deposit until ready for grading) then by
use of the Advance dialog in the NTFS permissions you could
get it set up.

> Hello Everyone,
> I work in 4 Elementary schools. We are running Windows Server 2003 with
> 98SE, 2000 and XP Pro workstations. We have a shared folder on each school
> server, called "Grade" where the students save all of their work. We want
> to
> prevent the students from moving, renaming and deleting the folders, but
> at
> the same time enable them to save their files and changes to files in that
> folder. I have tried many combinations with the security permissions on
> the
> folder, but it seems to always come up as all or none. I.E. if I uncheck
> "create folders/append data" they can not even save new files in the
> folder,
> etc. Are there any option?
>
> Thanks
> GP



Posted by Malke on April 21, 2006, 11:04 am
If you were  Registered and logged in, you could reply and use other advanced thread options
Roger Abell [MVP] wrote:

> No, you have no solution at least as long as you want to keep
> "enable . . . changes to files in that folder"
> If you could drop that part, so that you provide a pure drop-box
> (i.e. one chance, do not deposit until ready for grading) then by
> use of the Advance dialog in the NTFS permissions you could
> get it set up.
>
>> Hello Everyone,
>> I work in 4 Elementary schools. We are running Windows Server 2003
>> with 98SE, 2000 and XP Pro workstations. We have a shared folder on
>> each school server, called "Grade" where the students save all of
>> their work. We want to
>> prevent the students from moving, renaming and deleting the folders,
>> but at
>> the same time enable them to save their files and changes to files in
>> that folder. I have tried many combinations with the security
>> permissions on the
>> folder, but it seems to always come up as all or none. I.E. if I
>> uncheck "create folders/append data" they can not even save new files
>> in the folder,
>> etc. Are there any option?

You might want to create more than one folder. The way we set it up at
my son's school is to have generic users and groups

teacher - teachers (group)
student - students (group)

Then we have folders like this on the file server:

1. Folder just for teachers - only teachers can read/write to it
2. Folder for students to get handouts - teachers can read/write,
students can only read (and copy).
3. Folder for students to turn in their work - all can read/write to it.

You can have separate folders for the different grades of course.

I am using SUSE 9.3 on the file server, but I don't see why this
wouldn't work with a Windows server.

Malke
--
Elephant Boy Computers
www.elephantboycomputers.com
"Don't Panic!"
MS-MVP Windows - Shell/User

Posted by Roger Abell [MVP] on April 21, 2006, 11:14 am
If you were  Registered and logged in, you could reply and use other advanced thread options

> Roger Abell [MVP] wrote:
>
>> No, you have no solution at least as long as you want to keep
>> "enable . . . changes to files in that folder"
>> If you could drop that part, so that you provide a pure drop-box
>> (i.e. one chance, do not deposit until ready for grading) then by
>> use of the Advance dialog in the NTFS permissions you could
>> get it set up.
>>
>>> Hello Everyone,
>>> I work in 4 Elementary schools. We are running Windows Server 2003
>>> with 98SE, 2000 and XP Pro workstations. We have a shared folder on
>>> each school server, called "Grade" where the students save all of
>>> their work. We want to
>>> prevent the students from moving, renaming and deleting the folders,
>>> but at
>>> the same time enable them to save their files and changes to files in
>>> that folder. I have tried many combinations with the security
>>> permissions on the
>>> folder, but it seems to always come up as all or none. I.E. if I
>>> uncheck "create folders/append data" they can not even save new files
>>> in the folder,
>>> etc. Are there any option?
>
> You might want to create more than one folder. The way we set it up at
> my son's school is to have generic users and groups
>
> teacher - teachers (group)
> student - students (group)
>
> Then we have folders like this on the file server:
>
> 1. Folder just for teachers - only teachers can read/write to it
> 2. Folder for students to get handouts - teachers can read/write,
> students can only read (and copy).
> 3. Folder for students to turn in their work - all can read/write to it.
>
> You can have separate folders for the different grades of course.
>
> I am using SUSE 9.3 on the file server, but I don't see why this
> wouldn't work with a Windows server.
>

We generally use a web upload application for assignment
submission - which allows us tighter control over things like
their ability to "resubmit" and also allows for some automated
assessment upon submission.



Similar ThreadsPosted
Permissions January 4, 2006, 12:34 pm
Permissions July 6, 2006, 9:40 am
Permissions question August 22, 2005, 6:05 pm
NTFS Permissions September 12, 2005, 8:49 am
file permissions October 10, 2005, 12:30 pm
HiJackThis will not run? Permissions? November 11, 2005, 2:16 am
Dropbox permissions December 13, 2005, 5:17 pm
NTFS Permissions January 30, 2006, 5:33 am
View Only Permissions March 14, 2006, 12:09 am
NTFS Permissions March 24, 2006, 7:02 am

The site map in XML format XML site map

Contact Us | Privacy Policy