How do you do....it? Thread, Students write but not read access in Technical; Hello,
Just curious if anyone has got any shares on their servers in which their students can write into but ...
6th May 2010, 11:43 AM #1
Students write but not read access
Just curious if anyone has got any shares on their servers in which their students can write into but not read (if they created a shortcut to that share, for example).
We have a \\server01\logs$ area - which logs logins, logoffs and various other bits and bobs. The logs are written by vbs scripts run when a user logs on, off and at different times during their logon session. The VBS script writes to a log file.
Ideally, we'd like the students to be able to write to the log files and such, but if they tried to create a shortcut to \\server01\logs$ and then went through all the folders - they couldn't actually read the contents.
Bit of a contradiction in one sense, since they have to be able to read the file to write to it...but just wondered if anyone had got any suggestions?
We have ruled out disabling 'shortcut creation', as they use this in ICT lessons. We also know this logs location isn't public, so they'd have to guess it - but that might not take long really.
Running Windows 2003 network with XP clients.
IDG Tech News
6th May 2010, 11:48 AM #2
Modify the settings under advanced sharing. remove read but allow write/modify.
Last edited by ICT_GUY; 6th May 2010 at 11:50 AM.
6th May 2010, 11:53 AM #3
Remove inherited permissions while you are at it.
6th May 2010, 12:46 PM #4
Tried that but can't get it to work. The VBS script returns permission denied error. Hmm.
Thanks for your support none the less.
6th May 2010, 12:54 PM #5
We've got this on a couple of folders here - the users have all the permission boxes unticked except for "write".
6th May 2010, 12:57 PM #6
When you made the share you did set the share permissions to allow read write to everyone didn't you? Share permissions and security permissions are different.
6th May 2010, 01:17 PM #7
Yes, share permissions - everyone has full control for.
Security permissions, ideally I want staff and students to be able to
Create Folders (as the script creates the folder <Month> <Year> if it isn't there.
Create Files (as the script creates the text file "Logs_Login_<hour>.txt")
Write/Append files and folders
But not view the folder contents if they create a shortcut and try and access them.
6th May 2010, 01:24 PM #8
And your cleared inheritable permissions?
Also when is the script running? It may not be running under the users account.
6th May 2010, 01:31 PM #9
The script is running at login and it runs as the user.
6th May 2010, 01:38 PM #10
Could be your script, if it is appending to the log then it needs read access to grab the last position in the file and write from there. If you are just writing a new file each time then it may work, its probably just the append that is getting you into trouble.
Also without view list rights it may have issues running the checks to see if the file and folder exist before writing (not sure on this one). Might be an idea to try it with all but list rights and see if it works that way, if the ifexists checks fail because of the lack of folder list permission then you could get around it by changing the script to simply try to open the file and make one if it can't - if it is not written like this already.
By ict_support in forum Hardware
Last Post: 2nd April 2010, 02:35 PM
By theeldergeek in forum Mac
Last Post: 11th March 2010, 12:52 PM
By farquea in forum Windows
Last Post: 11th November 2009, 11:18 AM
By cjohnsonuk in forum Windows Server 2008
Last Post: 7th July 2009, 02:23 PM
By techyphil in forum MIS Systems
Last Post: 29th September 2008, 05:32 PM
Users Browsing this Thread
There are currently 1 users browsing this thread. (0 members and 1 guests)