Solved Access only to certain files Windows Server 2008

June 8, 2013 at 16:10:04
Specs: Windows Server 2008 R2
Hi. I have a scenario where I have a program (MS Access database file actually) that I need all users to connect to and access with read and write access. So I have this in a shared folder for all users to access with read and write access.

However, I don't want users to be able to use this shared folder to save other random files or use it as some transfer folder. So I want to deny write access to this folder, while letting anyone write into the database file if they need to.

It seems that Windows doesn't have an option for this and I've checked out several third party shared folder management programs and they only grant/restrict access to folders, not files within the folder.

Any ideas would be appreciated!


See More: Access only to certain files Windows Server 2008

Report •


✔ Best Answer
June 13, 2013 at 12:51:10
simplest solution is put the file in its own folder [not nested] and do the share permissions as read write.

The problem most folks have with file sharing and rights is they don't look at it from the perspective of the client but view it locally.

What I mean my this is you have a volume. In that volume you have folders. In those folders you have files. You see all of this locally. Now if you share a folder, which shares the files, your users looking from the outside can only see the share and the files it contains.

Given your criteria above you would have to make the share with Modify for all.
You would then have to mark EVERY file you don't want having read/write access a read only using ntfs permissions.

See why I recommend you organize via share level then file level?

Answers are only as good as the information you provide.
How to properly post a question:
Sorry no tech support via PM's



#1
June 8, 2013 at 20:06:25
So don't give write accesses to the directory, but do give write access to the file in question.

How To Ask Questions The Smart Way


Report •

#2
June 8, 2013 at 23:09:53
Just to expand on what Razor said, you need to use file system permissions to do this rather than share permissions. This is a very common scenario.

Report •

#3
June 12, 2013 at 15:16:44
Thanks Razor2.3 and ijack for these tips. It would seem to me that this makes sense. But either there is still something that I am missing or maybe there is more info on how to achieve this. I made a picture to show what I am trying to solve, just in case that helps to clarify what I am looking to achieve.

Thanks again.


Report •

Related Solutions

#4
June 12, 2013 at 15:20:32
Okay I thought I could attach the picture but I cant figure that out (if it is possible for this site). In any case this is the summary of what I am looking for:

For an example:
I have one file in a folder.
I DO want to share that FILE with full read/write access.
I DON'T want any read/write access to the rest of the folder.
This folder is not currently shared.
If I allow permissions in the security tab of the file's properties, how do I share this one file I want to share? (that is, what settings to choose and then how to access over network).


Report •

#5
June 13, 2013 at 12:51:10
✔ Best Answer
simplest solution is put the file in its own folder [not nested] and do the share permissions as read write.

The problem most folks have with file sharing and rights is they don't look at it from the perspective of the client but view it locally.

What I mean my this is you have a volume. In that volume you have folders. In those folders you have files. You see all of this locally. Now if you share a folder, which shares the files, your users looking from the outside can only see the share and the files it contains.

Given your criteria above you would have to make the share with Modify for all.
You would then have to mark EVERY file you don't want having read/write access a read only using ntfs permissions.

See why I recommend you organize via share level then file level?

Answers are only as good as the information you provide.
How to properly post a question:
Sorry no tech support via PM's


Report •

#6
June 16, 2013 at 15:24:46
wanderer: Given your criteria above you would have to make the share with Modify for all.
You would then have to mark EVERY file you don't want having read/write access a read only using ntfs permissions.

What? No you wouldn't. You'd just break inheritance at the directory. Then you'd remove the write & read permissions for everyone other than SYSTEM and Administrators. Next, you add "Transverse Folder" and "List Folder" for the directory only. Finally, you take the file you want people to be able to read/write, and add read/write permissions.

How To Ask Questions The Smart Way


Report •

#7
June 16, 2013 at 15:47:42
Wow I get it, you have a point. I'll try that out and let you know how it goes. Thanks!

Report •

Ask Question