Need to Deny Write Permission for All But One Group Member

[Jessi]

Hello. I have a file that is accessible to everyone in the
department (they are all members of the same security group). One
lead member of the group, however, needs to be able to modify the
file, and everyone else in the group needs to simply read the file.

The layout is as follows:

Root Folder - (Dept Group Has Modify Perm.)
|_ Tracking Folder - (Lead Staff Has Modify; Dept Group has Read/
Exec/List - NOT Inherited)
|_ Tracking FILE - (Lead Staff Has Full Control; Dept
Group has Read/Exec - NOT Inherited)

Something is wrong, however, because everyone in the department group
can still modify the file.

How can I do this?

Any help would be greatly appreciated!

Jessi

 

[Jeremy]

Re: Need to Deny Write Permission for All But One Group Member

You've done something wrong in your permissions if what you are describing
in your post doesn't work. It SHOULD work if it is set up correctly. Why
not do some permissions dumps with XCACLS and post them so we can see the
real permissions that are applied rather than what you think are applied...
(not meaning any insult here of course)

Cheers,
Jeremy.

"Jessi" <jessiright77@gmail.com> wrote in message
news:1185454605.404957.103640@k79g2000hse.googlegroups.com...
> Hello. I have a file that is accessible to everyone in the
> department (they are all members of the same security group). One
> lead member of the group, however, needs to be able to modify the
> file, and everyone else in the group needs to simply read the file.
>
> The layout is as follows:
>
> Root Folder - (Dept Group Has Modify Perm.)
> |_ Tracking Folder - (Lead Staff Has Modify; Dept Group has Read/
> Exec/List - NOT Inherited)
> |_ Tracking FILE - (Lead Staff Has Full Control; Dept
> Group has Read/Exec - NOT Inherited)
>
> Something is wrong, however, because everyone in the department group
> can still modify the file.
>
> How can I do this?
>
> Any help would be greatly appreciated!
>
> Jessi
>