File permissions and WSUS..

Microsoft Windows

Dear all,,

Have set up tested and now made live an SBS 2003 r2 server.

All appears to be rather well.
I have several points which i need to address however and could do with a
little assistance if anyone could help id be very gratefull.

1: There is only one network share for DATA\INFORMATION to which one person
has full access, But I need to prevent the rest from deleting anything
(accidentally or on purpose.)
I have a group set up to which these restrictions will apply to (containing
the required users) and added it to the security tab of the share (obvious)
But when i remove the Modify attribute; sure they cannot delete files (as
desired) however they cannot rename newly created files as will obviously be
nessasary.

2: Thought SBS 2003 r2 ran WSUS where is the configuration for it..as far as
i can see group policy has just been set set to download and install
automatically from the internet.
....NB.... so i can be sure GP is appliing correctly is there a default
policy that should apply to all domain PCs ....??? EG a default home page or
lock computer timeout or remove last user logon name etc....because there
appears to be some inconsistincies.

KR

Paul K
Hi Paul,

Thanks for posting here.

It appears that you are dealing with multiple issues that will require
individual attention to ensure that we are not counter-productive in out
support efforts. A suggestion in this post would be to post these issues
separately so that contributors within this newsgroup who specialize in
certain feature will be able to provide the 'value add' to resolving these
issues.

It is important to us that we provide you with the best support possible
and by breaking down these issues separately we will be able to address
them appropriately and in a timely manner.

Thank you for your patience and understanding.

Here, I will focus on your first question.

Q1. There is only one network share for DATA\INFORMATION to which one
person has full access, but I need to prevent the rest from deleting
anything (accidentally or on purpose.)
I have a group set up to which these restrictions will apply to (containing
the required users) and added it to the security tab of the share
(obvious). But when i remove the Modify attribute; sure they cannot delete
files (as desired) however they cannot rename newly created files as will
obviously be necessary.

A: You want to prevent the users to delete data, but you need the users can
rename the newly created files. If I am off base, please feel free to let
me know.

Based on my knowledge, you can use the NTFS special permission to reach
this goal. Please refer to the following steps:

1. Move this share folder to NTFS partition, and right click the share
folder -> Properties -> Security -> Advanced -> Permissions.

2. Add the group, and Deny "Delete" permissions.

I hope the above information helps.

Have a nice day.

Steven Zhu
MCSE
Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security
======================================================
PLEASE NOTE the newsgroup SECURE CODE and PASSWORD were
updated on February 14, 2006.? Please complete a re-registration process
by entering the secure code mmpng06 when prompted. Once you have
entered the secure code mmpng06, you will be able to update your profile
and access the partner newsgroups.
======================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from this issue.
======================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
======================================================
hi Steven,

Have already done all that hence my post but based on further recearch it
appears to be a file system limitation because in order to rename the file
the file name headder needs to be deleted **this is only based on what ive
read**.

Not really issues more questions i guess, so if you can help with my other
points id be very gratefull..

Kr
Paul
Hi Paul,

Thanks for your update.

Based on my test on our side, if you deny "Delete" NTFS special permission,
you still can rename the file. So if you can move the file to NTFS
partition, then you can use this feature to reach your goal.

For second question, unfortunately, based on the information I have now, I
am still a little unclear about the exact nature of this issue. Please
describe the issue to me in further detail and I will research your issue
promptly.

If you want to know how to configure group policy to match WSUS settings,
please refer to the following steps:

1. Group policy -> Computer configuration -> Administrative Templates ->
Windows Components -> Windows Update -> Specify intranet Microsoft update
service location.

2. Please type the intranet update server for detecting update.

I hope the above information helps and please let me know the detail
information so that I can provide the further assistance on this issue. I
am looking forward to your reply.

Have a good day.

Steven Zhu
MCSE
Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security
======================================================
PLEASE NOTE the newsgroup SECURE CODE and PASSWORD were
updated on February 14, 2006.? Please complete a re-registration process
by entering the secure code mmpng06 when prompted. Once you have
entered the secure code mmpng06, you will be able to update your profile
and access the partner newsgroups.
======================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from this issue.
======================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
======================================================