"No admin access" So I assume you can log in as each of the user's though?
Assuming so:
- Log in As User A
- Right-click on the folder you want to share access to.
- Select the Security tab
- Click Add
- Type User B's name in and click find to make sure it is matched(make sure you have the local computer selected if in a domain)
- Click OK
- Set permissions on the user to "FULL"
- Click OK
- Repeat Steps 1 to 8 logging in as User B and adding User A
By doing the above the users will be able to transfer files between their folders of their own accord.
You can then have either user login and run a script that does a copy of the files directly from one folder to the other.
A simple way to script copy of the folder so that the contents in sync would be as follows (Note, depending on the windows version, the Option "/DCopy:DAT" may need to be changed to "/DCOPY:T" or removed entirely):
REM Copy User A to User B:
Robocopy "C:\Users\UserA\Documents\Folder" "C:\Users\UserB\Documents\Folder" * /S /E /ZB /NP /IT /XJ /DCopy:DAT
REM Copy User B to User A:
Robocopy "C:\Users\UserB\Documents\Folder" "C:\Users\UserA\Documents\Folder" * /S /E /ZB /NP /IT /XJ /DCopy:DAT
You can save the above in a text file named something appropriate such as "SyncUserAandB.cmd"
(Note When you save the file, you will need to select format "ALL" in the type drop-down, or notepad will add a ".txt" to the file which will be hidden when you look at it in explorer unless you turn off "hide file extensions for known types")
Then the user may run the file, or you can create a windows scheduled task as either user which will run the file at the interval of your choosing.
Have you tried making a folder on the local drive, outside of the protected user folders (C: drive most likely)? This keeps it on the local computer, without access to non-users. Moving the files means that the files haven't changed physical location on the HD (most likely) so there should be no need to worry about leaving unsecure traces on the drive, unless you are moving them across multiple HDs. – computercarguy – 2017-12-15T16:10:28.680
@computercarguy I can create a temp folder and move files to it, but it has public permissions, is there a way to limit it to only userA and userB? – phflack – 2017-12-15T16:16:18.610
Can it go to the internet if not in a unsecured/public place? If so, Dropbox or GoogleDrive could be used and just share rights to that file with the one other user who is supposed to get the file. Or use an SFTP site with login credentials that only the two users know. – techturtle – 2017-12-15T16:17:04.153
@techturtle It is a physical desktop that can't move, and userA and userB are the same person. And along with can't use the internet (doubt I could get it approved), it would likely be terribly slow for the amount of data that will need to be transferred – phflack – 2017-12-15T16:19:42.713
2If you right click on the folder, there's a Security tab. This will allow you to change the Permissions to only the two users you want it to have access. BTW, "public" access doesn't mean that other computers have access to it, just other users on the same machine. – computercarguy – 2017-12-15T16:28:46.427
@techturtle, IDK about GoogleDrive, but DropBox isn't really that secure. There are known vulnerabilities, so that's not really a good option if things need to be really secure. – computercarguy – 2017-12-15T16:30:06.423
@computercarguy Other computers would not be able to access it, but userC on the same computer would. I also was looking through security, but that only appears to give users access. I can't find a way to deny everybody else access. Do you know of a command that could change the permissions? – phflack – 2017-12-15T16:31:57.920
You can include the Users group and set it to "Deny". – computercarguy – 2017-12-15T16:34:36.437
Also note that the file transfer is once... a couple thousand times. So once per user, but happening on many machines – phflack – 2017-12-15T16:34:37.847
@computercarguy When I selected it, it made it look as if that would also deny userA and userB – phflack – 2017-12-15T16:35:09.800
Specifically adding your users will override the User group's "Deny" attribute. – computercarguy – 2017-12-15T16:35:47.230
1@computercarguy "You are setting a deny permissions entry. Deny entries take precendence over allow entries. This means that if a user is a member of two groups, one that is allowed a permission and another that is denied the same permission, the user is denied that permission." - Tried it, I got locked out of my test file, they mean what they said – phflack – 2017-12-15T16:43:05.230
Let us continue this discussion in chat.
– computercarguy – 2017-12-15T16:46:10.167