Sign in
 
HomeWindows Server 2012Windows Server 2008 R2Windows Server 2003LibraryForums
Windows Server TechCenter >
> 
> 
Help with File System rights

Answered Help with File System rights

  • Friday, November 16, 2012 12:56 PM
     
     
    Sign In to Vote
    0
    I need some help with some file system rights on a certain folder. We are using Server 2008 R2 and I am struggling with this one. We have a folder called 'Reports' and then a few folders under that with department names. From our application, instead actually printing the report we print it to a PDF and put in one of the folders under 'Reports' . I need to make it some everyone can see the files, create the files(PDF's), rename files, and move files between folders. I DO NOT want anyone to be able to delete any files. Under the 'Special Permissions' I have unchecked the 'Delete' and 'Delete Files and Folders' options but then this removes the 'Modify' right. I have selected the 'Deny' on those 2 options as well but then we are having trouble creating files there. Does anyone know the correct way to set this up??

    Thanks for any advice.
     

All Replies

  • Friday, November 16, 2012 1:17 PM
     
     
    Sign In to Vote
    0
    I need some help with some file system rights on a certain folder. We are using Server 2008 R2 and I am struggling with this one. We have a folder called 'Reports' and then a few folders under that with department names. From our application, instead actually printing the report we print it to a PDF and put in one of the folders under 'Reports' . I need to make it some everyone can see the files, create the files(PDF's), rename files, and move files between folders. I DO NOT want anyone to be able to delete any files. Under the 'Special Permissions' I have unchecked the 'Delete' and 'Delete Files and Folders' options but then this removes the 'Modify' right. I have selected the 'Deny' on those 2 options as well but then we are having trouble creating files there. Does anyone know the correct way to set this up??

    Thanks for any advice.

    As there is no Delete permission, they cannot rename (rename = delete+create) file or folder. This is by default.

    Give CreateOwner - Modify permission - subfolders only - on root shared folder. Then They can create folders and rename the folders they created. Also they will have permisison to modify the files created in their folders.

    Then give yourgoup- Read Only - files only - on root shared folder. Then no one can modify/delete the files in root folder.

    Note: Give Administrator enough permission on all these folders to ensure they can access/modify/delete.


    YaHyA.ZaHeDi

     
  • Friday, November 16, 2012 3:08 PM
     
     
    Sign In to Vote
    0

    Thanks.

    They will not be creating folders, the folder structure is already there.  They are just creating files in the folders.

    With the setup you listed they can still delete the files that they have created, but no other files??  Is there any way to make it so they cannot delete ANY files?

    Also, if they don;t need the ability to rename files would that make it easier for me to setup?

     
  • Monday, November 19, 2012 9:12 AM
    Moderator
     
     Answered
    Sign In to Vote
    0

    Hi,

    As mentioned above, if you remove Delete permission of an account, it will fail to rename or move files as well. If this is OK, just uncheck Delete permission for user groups --- It will remove the Modify permission and this is common, because Delete permission is included in Modify permission.

    TechNet Subscriber Support in forum |If you have any feedback on our support, please contact tnmff@microsoft.com.

     
  • Wednesday, November 21, 2012 7:10 PM
     
     
    Sign In to Vote
    0
    I am still struggling with this.  I give the creator owner modify rights but after I apply it and go back the securty tab the group has no rights, there are no checkmarks.  Am I doing something wrong?
     
  • Wednesday, November 21, 2012 7:11 PM
     
     
    Sign In to Vote
    0

    Do i need to have SYSTEM listed with Full Control??

     
  • Friday, November 23, 2012 9:27 AM
    Moderator
     
     
    Sign In to Vote
    0
    I am still struggling with this.  I give the creator owner modify rights but after I apply it and go back the securty tab the group has no rights, there are no checkmarks.  Am I doing something wrong?

    Please check "Advanced" button to see exact permission settings. And for SYSTEM account, by default you could give it Full Control permission. It will not affect your permission settings whatever permission settings applied.
     
  • Thursday, November 29, 2012 2:42 PM
     
     
    Sign In to Vote
    0
    Ok, I have set so they can create the files and then only the owner of the file can modify or delete it.  Is there a way that the owner/creator can still create the files but not delete them at all??