confirmed weird NTFS issue with Office Docs



if i have a folder structure:

c:\shareddata
c:\shareddata\marketing

i set NTFS permissions on c:\shareddata to everyone READ (this folder and
subfolders) to be able to navigate the folders.

by default, the average user cannot add a file or open a file (exactly what
i want).

when I place a sample file up there called SAMPLE.TXT in the marketing
subfolder and set it explicitly to have DUMMYUSER to have FULL CONTROL on
this document, they can edit and make changes to the file. This is exactly
what I want.

However, when I put ANY office doc up there (XLS, DOC, etc.) and give the
same exact NTFS permission (DUMMYUSER, Full control on this file), they
cannot save the file. (It does not give 'access denied', but some
strange...."microsoft office excel cannot access the file..."

***the same permissions on a TXT/BMP file work to allow a user to change the
document, but won't allow a change to be saved on an office doc***

if I change the c:\shareddata\marketing to allow DUMMYUSER Full Control, the
document saves. And while this works, it opens a whole bunch of security
issues. (i don't want a user to have full control over a folder and all it's
contents. ultimately, i want to control WHICH files they have the rights to
view and edit.)

so in a nutshell, i guess i don't understand why an OFFICE doc is different
from a txt or bmp file when it comes to NTFS permissions. I can assign the
same exact permission method to txt/bmps and it works. but the moment i use
the same method on an XLS file, it fails. i just don't understand why
something so simple seems to be going so wrong.

i'm so close to doing what i want, but these Office files seem to be
particular in some way that i cannot figure out. i'd REALLY hate to have to
give out FULL CONTROL on a folder just to give some user read/write access
to a single office document.


.



Relevant Pages

  • Redirected folders, Desktop icons/Quicklaunch disappears after log in
    ... After the syncing is done, pressing F5 will show the missing desktop icons, ... Everyone Full Control ... Administrators - Full Control - This folder, subfolders, and files ...
    (microsoft.public.win2000.group_policy)
  • RE: Problems with permissions on users roaming profile
    ... sure that you back up all of the users data and info within the profile (just ... Everyone - Full Access Share permission on this folder and subfolders ... Administrator and Administrators - Full Control NTFS on this folder ...
    (microsoft.public.windows.server.general)
  • Re: Need Help RE: NTFS
    ... I've set NTFS permissions on c:\shareddata as Domain Admins (full control), ... In the marketing folder, I've created an Excel sample file. ... I went in to the NTFS permissions on both files and set DummyUser to Full ... I'm trying to create a share on our W2k3 network. ...
    (microsoft.public.windows.server.general)
  • Re: Odd File Behavior - Help!
    ... The quickest way to do that is to fiddle with the root folder of the ... System Full Control This folder, subfolders and files ... the Administrators group, and Creator/Owner. ...
    (misc.news.internet.discuss)
  • Re: Security and Permissions
    ... > Yes I am including the NTFS Permissions. ... > User Joe appears only in Group1 ... > share AND that the NTFS of the Sub Folder overrides the ... >>administrators full control and users change permissions ...
    (microsoft.public.win2000.security)