Folder rights question
Is it possible to configure a folder so that users are allowed to create/modify fileswithin the folder and sub-folders, but not allowed to create/delete/move the folder and sub-folders? I've tried to configure special permissions, but it'snot working.
January 8th, 2009 8:38pm
Hi Coach_GT,
Based on my test, you can configure the security settings as the following to enable read/modify file but disable delete file.
1. Right click the folder to open the Properties dialog.
2. In the Security tab, click Advanced.
3. Uncheck the Include inheritable permissions from this objects parent option, click Copy.
4. Remove unneeded permissions, such as Users and Create Owner (if you do not want users to delete file that they create themselves).
5. Click Add to add the group that should have permission to this folder.
6. Configure the permission of this group as following:
Allow
Travers Folders/ Execute File, List Folder/Read Data, Read Attributes, Read Extended Attributes, Create Files/Write Data, Create Folders/Append Data, Write Attributes, Write Extended Attributes, Read Permissions, Read Permissions
7. Ensure the Apply these permissions to objects and .. item is not checked, and click OK.
8. Check the Replace permission entries on all child objects with entries.. item, and click OK.
9. Click Apply and OK.
However, this configuration is not recommended due to the following reasons:
1. If you allow modification of a file, a user can delete all contents of the file. As a result, the Protection in the above procedure is useless.
2. This kind of permission settings will cause some problems for Office documents. For example, the temporary files created by Office could not be deleted properly.
Best Regards,
Vincent Hu
Free Windows Admin Tool Kit Click here and download it now
January 9th, 2009 11:49am
Here is what you will do1.assume your top folder is "Dockets"2.Assume your sub folder is"716410 ESA Monthly"3.Assume you have 5 subfolders and files in them.4.make 3 global security group Full control, Modify, Read and Execute5.Keep share permission full control on main "Docket folder" this way users are not blocked on share level we control them through NTFS.4.on "dockets" add "Domain admins" and give full permission.5.on "docket folder add those three group and give them read and execute permission6you are not giving speical permission yet simple ok so this way dont get confuse inheritance and all are defult till this point.7.so now only users who are in full control group and domain admins group can do anything on docket level rest users can not create delete modify anthing at this level.7.now you go to point 2 folder "716410 ESA Monthly" go to permission and go advance you will see its in herited from top which is dockets. 8.dont do anything here since this is what you want go to step 9.9.now go inside the the "716410 ESA Monthly" where yo ahve 5 folders selsct all of them and right click go to permission and advanced.10.remove the inheritacen check when ask copy the permission 11. now click on that secutiry group called modify rest we dont have to change at all. and click on edit.12.make sure that "Apply only to - This folder. subfolder and files13.select all except "change permissions" "Delete" and "full control" do not check any thing else. click ok and come out from special permission.14.click apply on advance security tab.15. go to or log on to machine with one of the user who is in modify level permission group access and try to do what you trying to achive.16all set done.. now if you need this to be automated you will have to create abatch file or script and run through batch file to apply to allfolders this the point where i am working on my quety also.let me know if you get something.thanksimranimmi_im@hotmail.comShift the Ctrl in our hands and we will Alt the world.
February 5th, 2009 8:10pm
Hi Vincent Hu,
In case of i will follow your instruction above. do you have solution to avoid reason "2.
This kind of permission settings will cause some problems for Office documents. For example, the temporary files created by Office could not be deleted properly"? Thanks in
advance
Tung
Nguyen
Free Windows Admin Tool Kit Click here and download it now
August 21st, 2011 5:48am