Understanding Read-only folders

Question

Hi,

  I've recently switched from Mac and I'm trying to understand Read-Only Folders to hopefully give me a feature that I used to use on Mac.  In the Mac OS you can "lock" a folder which prevents any user from adding or changing the contents of the folder.  Another handy feature was that if you tried to drag and remove a file from that folder it would just automatically copy it to the new location instead of moving it.  

So I'm trying to figure out the equivalent feature on Windows.  I believe it would be the "read only" option in the properties of a folder, however it doesn't seem to work the way I would expect.  If I mark a folder "read only" I can still change the contents of the folder.  I can drag and drop into it, copy, remove.  It's as if it completely ignores the "read-only" attribute.  

Is there a simple way to "lock" a folder so that no one can change the contents of that folder until it is "unlocked".  I'm not looking to password protect or encrypt a folder.  Just a way to keep it's contents in tact so no one, including me, cannot delete or move a file accidentally.

Thanks!

Answer 1

You're welcome. Thanks for the feedback.

Keith

Answer 2

Wow, this is amazing.  Thank you so much for the detailed explanation!  It's working!

Answer 3

You need to work with Advanced permissions. A lot of screenshots here, but that's just to be clear on the steps.

From the Security tab of the Properties dialog, click the Advanced button:

Then you see the Advanced permissions dialog. Note that all permissions are inherited, so you can't edit your 'Full Control' but you can add Deny permissions:

In the next dialog, you first specify yourself as the principal you want to modify permissions for:

Then click the Show advanced permissions link:

 and you'll be presented with the following. select Deny from the dropdown and then set permissions as shown and OK your way out.

Attempts to modify will open the Save dialog, but it will error out when you click OK. Attmepting to delete a file will result in a UAC prompt.

Keith

Answer 4

Keith,

  Thanks for your reply!  So I've been experimenting with permissions now instead but still can't get the results I want.  If I deny write, that works but only one way.  It seems to still let me delete or remove a file from the folder but it won't let me add a file.  If I deny read, well that doesn't work because then I can't even open the folder.  I still want to be able to see its contents but just not be able to remove, delete, or add to the folder.  I've been trying various checkbox combinations and not quite getting there.  The only options I seem to have are Full Control, Modify, Read&Execute, List folder contents, Read, Write.   Honestly it seems like anything other than denying write, will not let me see the folder.  But only denying write still allows you to modify the folder to some extent by either removing files or deleting.  I would greatly appreciate any suggestions?

thanks!

Answer 5

The read-only attribute, when applied to a folder, simply tells the Shell to look for a desktop.ini file within the folder for such things as a custom icon or localized display name.

What you want to do is modify permissions, done through the folder's Properties dialog. You can deny yourself & other users write, delete, etc. while still allowing read.

There's no built-in one-click equivalent, but it could be scripted and added to a context menu.

Keith