Operating system is Windows server 2012
i want users to be able to run certain software (let's call it: WorkTech); the shortcut for this software is in user's desktop.
WorkTech makes a folder when installed (common for most software) this folder (let's call it WorkTechFolder) is located in C drive (C:\WorkTechFolder)
This software needs to have modify permission because it constantly updates itself and creates temporary files inside of its folder (C:\WorkTechFolder\Temp).
The objective is:
- Deny user to delete, modify/rename, move and copy any file/folder from the software folder.
- Allow user to run software and save what user creates.
(Program allows user to save files in different folder, which is what we request users to do so the files saving shouldn't be an issue here)
So far i got
- Permissions: Traverse/Execute; List/Read; Read Attribute; Read Extended Attribute
- Deny: Delete Folder + Subfolders; Delete; Change Permissions; Take Owner.
This allows user to run software. It denies user from moving and deleting any file or folder inside C:\WorkTechFolder; however it still allows users to right click and select "Open with" and with this option user can modify files and save the files.
I want to stop users from modifying files. Is there any way to stop this using NTFS?
One of the files is the software logo in bitmap format; and one of the kids modified this logo using the "Open With - Paint" option.
I'd appreciate any help, again i am not sure if this can be achieved by using NTFS, but would appreciate any help. :)