We've had problems with the Caphaw.D virus, it hides the original file on a shared drive and creates a shortcut to the file which spreads the virus to anyone clicking on it. In order to stop the original files being hidden I've unchecked the allow checkbox for "write attributes" and "write extended attributes" for our users on a shared drive. This works but now they can't modify a file on this drive. They can still create new files and copy files onto the drive. As soon as I check both of these boxes they are able to save files again. Is there a way to allow the users to modify files they've created without letting them modify the attributes?
Thanks,
Stephen