Interesting Folder Permissions Question

[WiPPaH]

Hi Guys,

 

This problem presented itself today and I was wondering if anyone had any solutions for it?

 

==Scenario==

We have just rolled out a new iMac lab, when students try and import Movies into iMovie however it complains and crashes.

 

We have worked out this is because iMovie is trying to save the clip to the Movies folder on the users home drive, however this does not exist. Creating the folder manually resolves the problem.

 

==Planned Resolution==

My initial thought was to create the 'Movies' folder on all of our students Home Directorys with a bat file, however I want to make sure they don't delete these folders, but still be able to have full read/write access inside the folder.

 

So to recap:

 

Home Directory = Read/Write

Movies folder = Traverse & list contents

Inside the Movies folder = Read/Write

 

Im pretty sure this can be done in Linux, but I cant see a way in Windows.

 

==SideNotes==

Server 2003/XP/iMac Environment

 

Thoughts?

[Steady]

It sounds like the CACLS command is going to be your friend on this one :-

Cacls - Modify Access Control List

[WiPPaH]

It sounds like the CACLS command is going to be your friend on this one :-

Cacls - Modify Access Control List

 

Thanks Steady,

 

Yeah thats what I was going to use, I just cant get the permissions right so the user cannot delete the 'Movies' folder

[mounters]

Can you not just use a deny delete on the Movies folder?

[WiPPaH]

Can you not just use a deny delete on the Movies folder?

 

I have tried that Mounters, but it doesn't seem to work

 

I turned inheritance off, with:

 

Delete off

Delete subfolders and files On

 

No Joy

 

The user can still delete the folder from their home directory. Let me know if it works differently for you though!

 

Thanks again everyone for your ideas

 

Chris

[Steady]

Using this in a batch file for several users :-

cacls "\\\Home$\Pupils\M\USERNAME\movies" /t /e /g USERNAME:c

 

I'm guessing here but Mr USERNAME is in the M folder in this example.

[WiPPaH]

Using this in a batch file for several users :-

cacls "\\\Home$\Pupils\M\USERNAME\movies" /t /e /g USERNAME:c

 

I'm guessing here but Mr USERNAME is in the M folder in this example.

 

Sorry Steady, No Joy here with that command

 

The user was able to navigate up to their home directory and delete the Movies folder

[Steady]

What permissions do you have on that movies folder?

[WiPPaH]

After running the Calcs script:

 

Looks like just 'Change permissions' under the Advanced permission tab for 'Files Only'

 

As the user you cant get into it, but you can delete the folder.

 

Sidenote: Renaming the folder is denied (which is nice).