Change temp file folder as users can't save files on network share

[1DMF]

Hi,

We are trying to lock down a network share so users don't have delete permissions.

Only now they cannot save editied word documents apparently due to the temporary file used.

Is there a way of telling Office to use a partiuclar location for temporary files where the user does have delete permissions that is separate from the location the opened word documents resides?

Or is there another option to achive the same result?

Thanks,

1DMF.

"In complete darkness we are all the same, it is only our knowledge and wisdom that separates us, don't let your eyes deceive you."

"If a shortcut was meant to be easy, it wouldn't be a shortcut, it would be the way!"

Free Dance Music Downloads

 

[fredericofonseca]

What OS (both server and client) and what Word version.

Some combinations were known to cause that issue

Regards

Frederico Fonseca
SysSoft Integrated Ltd

http://www.syssoft-int.com

FAQ219-2884
FAQ181-2886

 

[1DMF]

SBS 2011 , Windows 7 or XP , Office 2003 or 2007 or 2010.

Mainly Windows 7 & 2010.

They all suffer from the same problem regardless of OS or Office version.

Any suggestions?

"In complete darkness we are all the same, it is only our knowledge and wisdom that separates us, don't let your eyes deceive you."

"If a shortcut was meant to be easy, it wouldn't be a shortcut, it would be the way!"

Free Dance Music Downloads

 

[strongm]

In case you've not yet read this stuff:

Try

http://support.microsoft.com/kb/211632,

particularly the section entitled "When and where Word creates temporary files"

And follow it up with the section entitled "NTFS Permissions Required to Create or Modify Documents" in

http://support.microsoft.com/kb/277867

 

[fredericofonseca]

on top of what Strongm said
- the way it should work is if you set "Make local copy of files stored on network or removable drives " on word options - other than that there is no way around this particular issue

Regards

Frederico Fonseca
SysSoft Integrated Ltd

http://www.syssoft-int.com

FAQ219-2884
FAQ181-2886

 

[1DMF]

Thanks Mike,

I'm confused, it states

Data Integrity
Word uses temporary files as a "safety net" to protect against system errors in its file-saving scheme. By saving to a temporary file first and then renaming the file to the proper name, Word ensures the data integrity of your original file against problems (such as a power failure or lost network connections) that may occur while the file is being written.

As well as

Saved Files (Same Directory as the Saved File)
When you click Save on the File menu, the following happens: 1.Word builds a new temporary file using the edited version of the document.
2.After Word creates the temporary file, Word deletes the previous version of the document.
3.Word renames the temporary file to the same name as the previous version of the document.
Text Pasted Between Files (Same Directory as Source File):

When Word copies and pastes between documents, it may create a temporary file in the same directory as the source file. This is especially true if the source file is saved or closed. The temporary file represents the information that was referenced by the Clipboard prior to saving the file. Word creates this temporary file by renaming the old copy of the file to a temporary file name.

So why on earth would I be told by the server support company that if they remove 'delete' permissions from the domain users accounts knowing that this also stops the ability to rename files, that this would solve my problem and provide what I needed to lock down the network share; wasting my time for 3 days while I refactored all our inhouse applications!

I also don't get this...

NTFS Permissions Required to Create or Modify Documents

MODIFY OR FULL CONTROL
The following is a list of folders where users need these permissions to run Word: •The workstation's Word program folder tree, if it is located on the server
•Temporary folder, if it is located on the server
•Any server folders where the user stores documents
•Any server folders where source files for links are located that the user needs to modify (for example, Microsoft Excel worksheets or charts)
NOTE: The minimum permission setting needed in order to open, edit, and save a document within a Windows folder is Modify.
Symptoms of Missing NTFS Permissions



Permission

Symptom



Write and List Folder contents

The error message "Word cannot open the document" appears when you try to open a file.



Read, Write

These permissions allow you to open a document, but when you close the document, the temp files associated with this document are not deleted. Also you cannot save the document, because the temp files cannot be modified or deleted.

There is no mention of requiring delete permisions to edit / save files, it states you only need Read/Write permissions, so why is this not working when delete permissions are removed?

Are you implying the server support company has messed up the permissions and not set them correctly or is this information incorrect.

Logically it would make sense that delete permissions are required to delete the temp file, but it doesn't say that in this MS information?

Clarification is appreciated.

1DMF



"In complete darkness we are all the same, it is only our knowledge and wisdom that separates us, don't let your eyes deceive you."

"If a shortcut was meant to be easy, it wouldn't be a shortcut, it would be the way!"

Free Dance Music Downloads

 

[fredericofonseca]

it states

NTFS Permissions Required to Create or Modify Documents

NTFS Permissions Required to Create or Modify Documents
MODIFY OR FULL CONTROL

Those two settings are the only ones that allow DELETE

so when you get

Read, Write
These permissions allow you to open a document, but when you close the document, the temp files associated with this document are not deleted. Also you cannot save the document, because the temp files cannot be modified or deleted.

That is the symptom of not having enough permissions - e.g. you set the user with only permission to read and write to the folder


So one possible way of allowing what you wish is to do as follows - untested so try it out.

set all files to read only
set the following advanced permissions to the user groups required accessing folders
list folder/read data
read attributes
read extended attributes
create files/write data
delete
read permissions



With word 2010, windows 7 client, windows 2008R2 server the following works
Share read only
Deny inherited write permissions to users group
users can do save as to another location, but can't change anything on the share.

Regards

Frederico Fonseca
SysSoft Integrated Ltd

http://www.syssoft-int.com

FAQ219-2884
FAQ181-2886

 

[1DMF]

users can do save as to another location, but can't change anything on the share.

and there lies the problem :-(

Looks like the server guys wasted my time getting me to implement code that would never work that is now just a useless additional overhead in the applications!

bah humbug!

"In complete darkness we are all the same, it is only our knowledge and wisdom that separates us, don't let your eyes deceive you."

"If a shortcut was meant to be easy, it wouldn't be a shortcut, it would be the way!"

Free Dance Music Downloads