none
NTFS PERMISSIONS

    Question

  • Hi,

    We have a shared folder that is accessed by all users in an office on Server 2008R2. All users are in a global group and permission are set to the domain local group. All users have the ability to read, write, create etc. We want to prevent the same group of users from deleting folders and files. When applying the deny delete and or delete subfolders or both, users are still able to create folders and documents. However, lose the ability to name/rename the folder or file. Have tried many different ways to apply or set these permissions to no avail. Have read a few different forums but no working answer.

    Wednesday, April 16, 2014 12:28 AM

Answers

  • there's a lot of questions about this in the past.

    users - can create / rename / overwrite --> users need to have modify rights and will be able to delete

    users - can read and write only --> users cannot rename, cannot over write, cannot delete

    so basically:

    rename=overwrite=delete

    read and write only (cannot delete, rename and overwrite)


    Every second counts..make use of it. Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.
    IT Stuff Quick Bytes

    Wednesday, April 16, 2014 1:08 AM

All replies

  • there's a lot of questions about this in the past.

    users - can create / rename / overwrite --> users need to have modify rights and will be able to delete

    users - can read and write only --> users cannot rename, cannot over write, cannot delete

    so basically:

    rename=overwrite=delete

    read and write only (cannot delete, rename and overwrite)


    Every second counts..make use of it. Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.
    IT Stuff Quick Bytes

    Wednesday, April 16, 2014 1:08 AM
  • Thanks for the reply. I have seen some about create/owner where user has full control of what they create but not to what someone else has created. Would this be a viable solution? This would be ok. If so, how to proceed?

    Thanks

    Wednesday, April 16, 2014 1:14 AM
  • i'm not sure about that...

    but i can suggest enable shadow copies, and run it at an specified interval of time.

    it can help to prevent data loss.

    check out this link:

    http://technet.microsoft.com/en-us/magazine/dd637757.aspx


    Every second counts..make use of it. Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.
    IT Stuff Quick Bytes

    Wednesday, April 16, 2014 3:00 AM