I have a VBA Excel-based timesheet program that allows employees to submit weekly timesheets. The application itself takes charge of creating each weekly timesheet and saving it to a specific network location (ActiveDirectory). At other times, the application also needs to be able to read and retrieve files from that folder. Users run the Excel application under their own credentials. Currently, all users have full rights to the folder so that the application can save and retrieve files there without any fuss.
The storage folder is difficult (but not impossible) for the typical user to find, but I would prefer to prevent all user access to that folder and still have the timesheet application be able to store files in that location.
What is the best way to do this reliably? Is there a way to elevate the application's network rights to an Admin level at the appropriate point(s) within the app (I do not mind including an elevated user's password within the application), and then drop them back to user level when the timesheet storage folder operations have completed?
Ideas about to do this or similar approaches would be greatly appreciated.
Thanks,
Peter.
The storage folder is difficult (but not impossible) for the typical user to find, but I would prefer to prevent all user access to that folder and still have the timesheet application be able to store files in that location.
What is the best way to do this reliably? Is there a way to elevate the application's network rights to an Admin level at the appropriate point(s) within the app (I do not mind including an elevated user's password within the application), and then drop them back to user level when the timesheet storage folder operations have completed?
Ideas about to do this or similar approaches would be greatly appreciated.
Thanks,
Peter.
