+ Post New Thread
Results 1 to 10 of 10
How do you do....it? Thread, Students write but not read access in Technical; Hello, Just curious if anyone has got any shares on their servers in which their students can write into but ...
  1. #1
    Silvor's Avatar
    Join Date
    Oct 2007
    Posts
    122
    Thank Post
    18
    Thanked 15 Times in 10 Posts
    Rep Power
    17

    Question Students write but not read access

    Hello,

    Just curious if anyone has got any shares on their servers in which their students can write into but not read (if they created a shortcut to that share, for example).

    We have a \\server01\logs$ area - which logs logins, logoffs and various other bits and bobs. The logs are written by vbs scripts run when a user logs on, off and at different times during their logon session. The VBS script writes to a log file.

    Ideally, we'd like the students to be able to write to the log files and such, but if they tried to create a shortcut to \\server01\logs$ and then went through all the folders - they couldn't actually read the contents.

    Bit of a contradiction in one sense, since they have to be able to read the file to write to it...but just wondered if anyone had got any suggestions?

    We have ruled out disabling 'shortcut creation', as they use this in ICT lessons. We also know this logs location isn't public, so they'd have to guess it - but that might not take long really.

    Running Windows 2003 network with XP clients.

  2. #2
    ICT_GUY's Avatar
    Join Date
    Feb 2007
    Location
    Weymouth
    Posts
    2,269
    Thank Post
    683
    Thanked 283 Times in 204 Posts
    Rep Power
    106
    Modify the settings under advanced sharing. remove read but allow write/modify.
    Last edited by ICT_GUY; 6th May 2010 at 11:50 AM.

  3. #3
    ICT_GUY's Avatar
    Join Date
    Feb 2007
    Location
    Weymouth
    Posts
    2,269
    Thank Post
    683
    Thanked 283 Times in 204 Posts
    Rep Power
    106


    Remove inherited permissions while you are at it.

  4. Thanks to ICT_GUY from:

    Silvor (10th May 2010)

  5. #4
    Silvor's Avatar
    Join Date
    Oct 2007
    Posts
    122
    Thank Post
    18
    Thanked 15 Times in 10 Posts
    Rep Power
    17
    Tried that but can't get it to work. The VBS script returns permission denied error. Hmm.
    Thanks for your support none the less.

  6. #5
    enjay's Avatar
    Join Date
    Apr 2007
    Location
    Reading, Berkshire, UK
    Posts
    4,497
    Thank Post
    282
    Thanked 196 Times in 167 Posts
    Rep Power
    76
    We've got this on a couple of folders here - the users have all the permission boxes unticked except for "write".

  7. #6
    ICT_GUY's Avatar
    Join Date
    Feb 2007
    Location
    Weymouth
    Posts
    2,269
    Thank Post
    683
    Thanked 283 Times in 204 Posts
    Rep Power
    106
    When you made the share you did set the share permissions to allow read write to everyone didn't you? Share permissions and security permissions are different.

  8. #7
    Silvor's Avatar
    Join Date
    Oct 2007
    Posts
    122
    Thank Post
    18
    Thanked 15 Times in 10 Posts
    Rep Power
    17
    Yes, share permissions - everyone has full control for.
    Security permissions, ideally I want staff and students to be able to
    Create Folders (as the script creates the folder <Month> <Year> if it isn't there.
    Create Files (as the script creates the text file "Logs_Login_<hour>.txt")
    Write/Append files and folders

    But not view the folder contents if they create a shortcut and try and access them.

  9. #8
    ICT_GUY's Avatar
    Join Date
    Feb 2007
    Location
    Weymouth
    Posts
    2,269
    Thank Post
    683
    Thanked 283 Times in 204 Posts
    Rep Power
    106
    And your cleared inheritable permissions?
    Also when is the script running? It may not be running under the users account.

  10. #9
    Silvor's Avatar
    Join Date
    Oct 2007
    Posts
    122
    Thank Post
    18
    Thanked 15 Times in 10 Posts
    Rep Power
    17
    I did.
    The script is running at login and it runs as the user.
    Very strange!

  11. #10

    SYNACK's Avatar
    Join Date
    Oct 2007
    Posts
    11,270
    Thank Post
    884
    Thanked 2,747 Times in 2,321 Posts
    Blog Entries
    11
    Rep Power
    785
    Could be your script, if it is appending to the log then it needs read access to grab the last position in the file and write from there. If you are just writing a new file each time then it may work, its probably just the append that is getting you into trouble.

    Also without view list rights it may have issues running the checks to see if the file and folder exist before writing (not sure on this one). Might be an idea to try it with all but list rights and see if it works that way, if the ifexists checks fail because of the lack of folder list permission then you could get around it by changing the script to simply try to open the file and make one if it can't - if it is not written like this already.

  12. Thanks to SYNACK from:

    Silvor (10th May 2010)



SHARE:
+ Post New Thread

Similar Threads

  1. SAN / NAS Read Write Speeds
    By ict_support in forum Hardware
    Replies: 5
    Last Post: 2nd April 2010, 02:35 PM
  2. Replies: 18
    Last Post: 11th March 2010, 12:52 PM
  3. Replies: 3
    Last Post: 11th November 2009, 11:18 AM
  4. Sanako common file store : write but not read
    By cjohnsonuk in forum Windows Server 2008
    Replies: 0
    Last Post: 7th July 2009, 02:23 PM
  5. Capita VLE for LIVE Read-Write into SIMS
    By techyphil in forum MIS Systems
    Replies: 15
    Last Post: 29th September 2008, 05:32 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •