Security Permissions Clarification

[Volk359]

Hello,

We need to make public, in our organization, a Power Point presentation but we want to have it set as read only. As far as I know putting a password on it will only deny access to the file, whereas in Word or Excel one could open as Read Only, so I figured why not set the security permissions on the file itself.

Never having done this before I did some research but wanted to be clear about what I found before proceding. Currently the group or user names listed are Administrators, me (my user name) and SYSTEM. Administrator would be the network administrator, the user would be the original document creator (or who last opened the file?) and SYSTEM is everybody else. Other individual groups or users can be added and configured or removed. Am I correct so far?

As I understand it, the owner of the file, in this case me, has full control regardless of the permissions set for other users, unless I make a change to myself. If I set the deny permission for SYSTEM to Write and Modify then all other users on the network would be able to open the document and view it but would not be able to change anything or at least save the changes over the original document. If an individual needs write access, such as my supervisor, I can add that person and grant them full access. Again, am I right so far?

Is this a proper way to do this or am I heading down a road of trouble? The people involved are good MS Office users but I doubt their competency in advanced XP settings. Anything else I should know in advance before setting this up?

We have XP Pro and Windows 2000 in the office. Not sure what the network is but if it's needed let me know how I can find that information.

Thanks

 

[tony72000]

Almost right...

Administrators (followed by computername\administrators) are any one that is part of the LOCAL administrators group (not the network).

Users (followed by computername\users) is any one that is part of the LOCAL User group (not the network).

System is an account used by the computer to run services etc.

User groups that have the yourdomainname\group are network based security groups.

If your name was in the list (followed by yourname@yourdomain.com), then this your network log-on.

To want the file accessible to all, you must use the EVERYONE group.

 

[rvnguy]

Volk359,

Basically, I think you are trying to preserve the file contents from alteration & not copying etc.

As you have a network, place this file in a location accessable to your target group, and set or have it set to Read Only. A user can then open it and view the contents, they can also save a copy locally and make changes but they cannot save it back to the server using the same name. This preserves the original file and it's content.

Hope this is what you are looking to accomplish

rvnguy
"I know everything..I just can't remember it all

 

[Volk359]

rvnguy, that's what we want to do but I'm not sure how to set it to read only, other than right-click, properties and set the attribtues to read only. That can easily be undone though. Is there a simpler way?

 

[linney]

You could just set a Modify password and ignore and omit the Open Powerpoint password.

Microsoft Office Assistance: Require a password to open or change a presentation

http://office.microsoft.com/assista...C010229721033&QueryID=5YY8EWWOY&respos=7&rt=2

PowerGuard v.1.1

http://www.moonlight-software.com/powerguard.htm

Can you do anything via Encryption?

Winzip has file password capabilities.

 

[Volk359]

The password works but doesn't give an option to read only. We got our IT folks involved and I'll let them figure it out. Thanks anyway.

 

[tony72000]

Talk about making a simple thing complicated!

Just modify the security tab for the file and make sure that either the damain user or the domain security group has read only access.