How to prevent users from deleting Word/Excel files in a Share?

How to prevent users from deleting Word/Excel files in a Share?

Secure Home | Search | About
 Microsoft Applications Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
How to prevent users from deleting Word/Excel files in a Share? =?Utf-8?B?SXNyYWVsQyBmcm9tIE1p 05-14-2008
Posted by =?Utf-8?B?SXNyYWVsQyBmcm9tIE1p on May 14, 2008, 9:45 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Anyone know how to prevent users from deleting files/folders (Word/Excel
files) but still allow them to edit and save them?
I setup a test share on a Win2K3 Server. Remove all rights for all users
except for the admin group. At the NTFS security tab I grant a group Modify,
Read/execute, list, read and write permissions. Then in the advance/special
permissions tab I enable the deny delete subfolders and files right. I then
create a word doc and it allws me to create it and edit it but the temp file
dont get deleted. If an Excel file gets edited and saved we get an error the
the folder is marked as read only.
So at a high level I wnt to prevent users from deleting MS Office docs but
still edit them.
I know the users can still open then and delete the contents of the file
itself but I can live with that...any suggestions?
Thank you,


Posted by =?Utf-8?B?QW50ZWF1cw==?= on May 15, 2008, 2:52 am
If you were  Registered and logged in, you could reply and use other advanced thread options
You can't. Word makes a copy of the file and then replaces the original on
exit, hence anything which stops deletion also stops editing.

Two alternatives which might be useful are to delete-protect folders but not
files, or to write a script which 'seals' files after they've remained
un-edited for a specified time.


"IsraelC from Miami" wrote:

> Anyone know how to prevent users from deleting files/folders (Word/Excel
> files) but still allow them to edit and save them?
> I setup a test share on a Win2K3 Server. Remove all rights for all users
> except for the admin group. At the NTFS security tab I grant a group Modify,
> Read/execute, list, read and write permissions. Then in the advance/special
> permissions tab I enable the deny delete subfolders and files right. I then
> create a word doc and it allws me to create it and edit it but the temp file
> dont get deleted. If an Excel file gets edited and saved we get an error the
> the folder is marked as read only.
> So at a high level I wnt to prevent users from deleting MS Office docs but
> still edit them.
> I know the users can still open then and delete the contents of the file
> itself but I can live with that...any suggestions?
> Thank you,
>

Posted by =?Utf-8?B?SXNyYWVsQyBmcm9tIE1p on May 15, 2008, 7:43 am
If you were  Registered and logged in, you could reply and use other advanced thread options


"Anteaus" wrote:

> You can't. Word makes a copy of the file and then replaces the original on
> exit, hence anything which stops deletion also stops editing.
>
> Two alternatives which might be useful are to delete-protect folders but not
> files, or to write a script which 'seals' files after they've remained
> un-edited for a specified time.
>
>
> "IsraelC from Miami" wrote:
>
> > Anyone know how to prevent users from deleting files/folders (Word/Excel
> > files) but still allow them to edit and save them?
> > I setup a test share on a Win2K3 Server. Remove all rights for all users
> > except for the admin group. At the NTFS security tab I grant a group Modify,
> > Read/execute, list, read and write permissions. Then in the advance/special
> > permissions tab I enable the deny delete subfolders and files right. I then
> > create a word doc and it allws me to create it and edit it but the temp file
> > dont get deleted. If an Excel file gets edited and saved we get an error the
> > the folder is marked as read only.
> > So at a high level I wnt to prevent users from deleting MS Office docs but
> > still edit them.
> > I know the users can still open then and delete the contents of the file
> > itself but I can live with that...any suggestions?
> > Thank you,
> >

Posted by =?Utf-8?B?SXNyYWVsQyBmcm9tIE1p on May 15, 2008, 7:44 am
If you were  Registered and logged in, you could reply and use other advanced thread options


"Anteaus" wrote:

> You can't. Word makes a copy of the file and then replaces the original on
> exit, hence anything which stops deletion also stops editing.
>
> Two alternatives which might be useful are to delete-protect folders but not
> files, or to write a script which 'seals' files after they've remained
> un-edited for a specified time.
>
>
> "IsraelC from Miami" wrote:
>
> > Anyone know how to prevent users from deleting files/folders (Word/Excel
> > files) but still allow them to edit and save them?
> > I setup a test share on a Win2K3 Server. Remove all rights for all users
> > except for the admin group. At the NTFS security tab I grant a group Modify,
> > Read/execute, list, read and write permissions. Then in the advance/special
> > permissions tab I enable the deny delete subfolders and files right. I then
> > create a word doc and it allws me to create it and edit it but the temp file
> > dont get deleted. If an Excel file gets edited and saved we get an error the
> > the folder is marked as read only.
> > So at a high level I wnt to prevent users from deleting MS Office docs but
> > still edit them.
> > I know the users can still open then and delete the contents of the file
> > itself but I can live with that...any suggestions?
> > Thank you,
> >

That's what I thought...thank you Anteaus

Posted by =?Utf-8?B?SXNyYWVsQyBmcm9tIE1p on May 15, 2008, 7:45 am
If you were  Registered and logged in, you could reply and use other advanced thread options
Thank you Anteaus...that's what I though...any ideas if there re 3rd party
solutions out there?
Thanks again

"Anteaus" wrote:

> You can't. Word makes a copy of the file and then replaces the original on
> exit, hence anything which stops deletion also stops editing.
>
> Two alternatives which might be useful are to delete-protect folders but not
> files, or to write a script which 'seals' files after they've remained
> un-edited for a specified time.
>
>
> "IsraelC from Miami" wrote:
>
> > Anyone know how to prevent users from deleting files/folders (Word/Excel
> > files) but still allow them to edit and save them?
> > I setup a test share on a Win2K3 Server. Remove all rights for all users
> > except for the admin group. At the NTFS security tab I grant a group Modify,
> > Read/execute, list, read and write permissions. Then in the advance/special
> > permissions tab I enable the deny delete subfolders and files right. I then
> > create a word doc and it allws me to create it and edit it but the temp file
> > dont get deleted. If an Excel file gets edited and saved we get an error the
> > the folder is marked as read only.
> > So at a high level I wnt to prevent users from deleting MS Office docs but
> > still edit them.
> > I know the users can still open then and delete the contents of the file
> > itself but I can live with that...any suggestions?
> > Thank you,
> >

Similar ThreadsPosted
Stop Users Deleting and Moving Files June 16, 2006, 10:21 am
How to prevent users on unauthorized machines from w2k3 files November 27, 2007, 4:23 pm
Why am I deleting these files June 12, 2008, 9:36 am
Deleting TEMP files in C:\ April 1, 2006, 4:46 am
controlling deleting of files with NTFS June 27, 2007, 12:50 pm
Deleting Archived Certificates from Users' My store on Workstations July 8, 2008, 3:50 pm
Prevent files from being copied August 25, 2005, 9:01 am
How to Prevent Users from Moving Folders April 25, 2007, 7:32 am
Group policy to prevent users to safe password February 20, 2007, 5:48 am
help: can't share files October 7, 2007, 12:28 pm

The site map in XML format XML site map

Contact Us | Privacy Policy