Hi,

I have SBS 2003 and a terminal server on Server 2003, on the terminal server
the users are using a dos program that has a printing program with it.
This program polls a particular folder and then prints whatever it finds in
there, if 2 people are running the printing program at once then when a job
is sent they will both open the file and try to print this will then error
and neither will print the job.

What i am trying to achieve is that only the creator of the file can see it.
If i have 2 users looking at the drop folder that is used by the program,
when one of them creates a file they can go into the folder and see their
file, while the other user can open the folder but cannot see the file.

At the moment the folder in question i have set Creator/Owner with modify
permissions for subfolders and files. On the folder itself there is
permisisons for SYSTEM and administrators both set to full control.

With these settings they can create the files that they need to however
neither of them are able to access the folder in question, so what i changed
was to add in Everyone with only read / write controls on the folder only,
now they are able to access the folder but they can see any files that are
created within.

I hope this makes sense.

Martin

Not sure I'm understanding you correctly - from the perspective of file
permissions, users can only access the files they're supposed to have access
to - their own files - right? But all the users can see all the files even
though they can't open them, and that's what you're trying to prevent?

If that's the case, you need Access Based Enumeration. You can search
microsoft.com for documentation, but supposedly this download includes a
white paper:

Windows Server 2003 Access-based Enumeration
http://www.microsoft.com/Downloads/d...displaylang=en

If I'm misunderstanding the question, please post back.


"Martin" <Martin@newsgroup> wrote in message
news:8B0907A0-DF23-43C3-8812-536DDF49E602@newsgroup

> Hi,
>
> I have SBS 2003 and a terminal server on Server 2003, on the terminal
> server
> the users are using a dos program that has a printing program with it.
> This program polls a particular folder and then prints whatever it finds
> in
> there, if 2 people are running the printing program at once then when a
> job
> is sent they will both open the file and try to print this will then error
> and neither will print the job.
>
> What i am trying to achieve is that only the creator of the file can see
> it.
> If i have 2 users looking at the drop folder that is used by the program,
> when one of them creates a file they can go into the folder and see their
> file, while the other user can open the folder but cannot see the file.
>
> At the moment the folder in question i have set Creator/Owner with modify
> permissions for subfolders and files. On the folder itself there is
> permisisons for SYSTEM and administrators both set to full control.
>
> With these settings they can create the files that they need to however
> neither of them are able to access the folder in question, so what i
> changed
> was to add in Everyone with only read / write controls on the folder only,
> now they are able to access the folder but they can see any files that are
> created within.
>
> I hope this makes sense.
>
> Martin