vendredi 16 mars 2012 07:27
My environment is Windows Server 2008 R2 Standard.
I want to share a folder, let's say "C:\Data", for a group of people (let's say "Finance department").
What I want is that each member in group "Finance department" can upload data to shared folder "C:\Data" and he can only delete the data uploaded by him.
In Windows Server 2008, I can do that by set contributor permission for group "Finance department" of folder "C:\Data".
However, in Windows Server 2008 R2, there are only Read and Read/Write permissions which do not do exactly what I want.
How can I solve it ?
Toutes les réponses
dimanche 18 mars 2012 14:22
1. It depends how you define the rights. If you assing rights to individual user or a group of users.
2. You should interrupt the rights inheritance from parrent object. You set rights to this folder only, namely the create.
3. User rights are minimal for file creation. User is Owner/Creator of new file and this implies the full rights to new file. (All including ownership).
4. You have not specified, if there is any internal folder structure in your shared folder.
What user/group rights including sharing are asigned to your c:\Data ?
dimanche 18 mars 2012 16:45
take a look at this link it can help you :
Oussama Oueslati | System Engineer | vNext Consulting
lundi 19 mars 2012 02:38
With your suggestion, I still cannot find a solution for my problem.
Let I make my situation be clearer for you.
In my domain, I have a file server. The operating system of that file server is Windows Server 2008 R2 Standard.
My domain has many user groups. One user group is "Finance Department", which includes all employees in Finance Department.
Now I create a folder c:\Data on the file server. Then I want to share that folder to user group "Finance Department". I want that each user in "Finance Department" can create new folders/files in c:\Data, read all folders/files in c:\Data but only can change/delete the folders/files created by himself.
What I will do in Windows Server 2008 is that:
1) Create folder c:\Data
2) Right click to folder c:\Data, select Share with --> Specific people...
3) Type "Finance Department", click Add.
4) Select "Finance Department", on Permission Level choose Contributor. Then click Share.
Those actions above will do what I want.
However, in Windows Server 2008 R2, in step 4 I see only Read and Read/Write permissions, but no Contributor. So I don't know how to assign Contributor permission in Windows Server 2008 R2. Can you help me ?
lundi 19 mars 2012 08:41Modérateur
Thanks for your posting.
Not find the definition of “Contributor permission level” form my search, so I don’t know its permission set.
Generally, we configure NTFS permission not share permission to control user folder permission.
For your requirement: each member in group "Finance department" can upload data to shared folder "C:\Data" and he can only delete the data uploaded by him.
It’s very easy to achieve that through NTFS configuration.
Create folder “Data”, add group “Finance department” and grant read/write share permission.
Security tab-->“Finance department” group-->Edit-->remove “Full Control”, “Modify” permission (you can edit Access Control List follow your requirement)-->save
Security tab-->Edit-->Add-->CREATOR OWNER-->modify permission.
So CREATOR OWNER has permission to create file and folder and modify permission only for file and folder it created.
For more information please refer to following MS articles:Share and NTFS Permissions on a File Server
Permissions for files and folders
How to dynamically create security-enhanced redirected folders
TechNet Community Support
- Marqué comme réponse James Nguyen Hong Ha mardi 20 mars 2012 02:06
mardi 20 mars 2012 02:08
Thank you very much.
You just hit the nail on the head. Your instruction is what I'm looking for.
Also thanks Milos and Oussama for your help.