JSI Tip 9345. How can I prevent users from altering a file or folder attribute in Windows XP and Windows Server 2003?

You can deny the users the ability to alter a file or folder attribute, like the Read-Only, System or Hidden attribute, by denying them the Write Attributes special permission on the file or folder. This will prevent the user from changing the attributes on the file or folder, without altering any of their other permissions on that object.

To set the deny Write Attributes permission on a file or folder:

1. Use Windows Explorer, or My Computer, to navigate to the file or folder.

2. Right-click the file system object and press Properties.

3. Select the Security tab.

4. Press the Advanced button.

5. If the user or group that you wish to deny is not listed, press Add, type user or group name, and press OK.

6. Select the user or group that you wish to deny and press Edit.

7. If the Deny column, check the Write Attributes box.

8. If you wish to change the Apply onto setting and it is not available, you will need to clear the Inherit from parent the permission entries that apply to child objects. Include these with entries explicitly defined here box.

9. Press OK until all dialog boxes are closed.

NOTE: If you are NOT joined to a domain on Windows XP Profession, you must turn off Simple File Sharing.