W2000 Server - Creating Folders& files for user tasks

[JCPynn]

I want to set up folders containing a document that several users can access simultaneously. I (administrator) want them to be able to work on the task independently being able to save their individual completed versions of the task and ensuring I retain a copy of the original uncompleted task.
I don't want them to be able to have access to each others work.

This is probably quite simple - so am I so any step by step explanations would be appreciated

 

[DaveNamou]

Create a Folder with the following permissions
[GROUP] [Permissions]

Everyone
Read and Execute
List Folder Contents
Read
+ Create Files / Write Date
Creator/Owner
Change
Administrator
Full Control


Now, I tested this and this is how it should work.

-Everyone can READ any item in that folder.
-Only the person who CREATED a file can modify the file.
-If a user opens another users file and tries to modify it, he will have to save the file under a different name.

I know you asked for detailed instructions, but I'm assuming you know about NTFS permissions and how to set them. If not, reply back.

-By the way, the CHANGE permission is everything but Full Control in the Security tab.
-And, the + Create Files / Write Date is under the Advanced settings under Permissions. Click Advanced, then highlight the Everyone Group and click Add/Edit.



Hope that helps.
Dave Namou, MCSE CCEA

 

[donnie4564]

You need to create groups that correspond to users of similar access (example: each department)

Add users to the groups respectively.

First, from the properties of the folder, share the folder with everyone full control then from the security tab remove the everyone from the resource, by removing the check to inherit and then choose remove.

Add each "department" group to the resource.

Assign permissions for each group.

Every folder and file created under this one will inherit the permission of the parent folder, by default.

Unless you have a very small network it is not a good plan to assign permissions to individual files or add individual users to folder permissions. Also, this makes it easier to find out why a particular user can't access the resource, Because from the properties of the user you can see all the groups they are a member of.

 

[JCPynn]

Thanks for the above.

Within a folder users can now download tasks and save as
once completed. BUT

How do I stop users deleting the original file and or other users work?

 

[donnie4564]

Permissions are set on the resource and allows or deny the user or group access to the resource.

If you deny a user access, the deny will always override any allow permissions. So, if a user is a member of two groups one of which has allow full control to a resource, the other group has deny full control to the same resource then the user will not access that resource.

So you have two choices, you can remove the check from the allow box for full control or you can click the advanced button and place a check in the deny box for the delete permission.

You should document your permission changes. This could really help if you need to track the reason a user can't access something that they should be able to access.