Having problem in Server2008 Domain
I am unable to set permissions to the share folder & files it not working properlyI want to set permissions that user can create, change the data in existing file but they can't delete it. Please help me regarding the same Deepak Gaikwad
October 9th, 2009 8:22am
I am unable to set permissions to the share folder & files it not working properlyI want to set permissions that user can create, change the data in existing file but they can't delete it. Please help me regarding the same A.S.A.PDeepak Gaikwad
Free Windows Admin Tool Kit Click here and download it now
October 9th, 2009 8:22am
hello,this can definitelly be done on the permission level. you just need to prevent the users Delete the file. You need to go into the Advanced settings on the Security tab of the file/folder and create a new Deny ACE for that group which Denies the Delete permission and the Delete Subfolders and Files.But there can be one problem with that setup. Because the users will then be denied the Delete, it will make you problems with some applications such as Microsoft Word. The editor, when it saves the document changes, it first creates a new temp file to receive the newly edited copy. Only after the data are safely in the temp file, it renames the original file and replaces it with the newly created temp. And then comes the problem. After this name switch, the original file is attempted to be deleted.in you case, it would not be possible. Resulting in two possible issues. Either Word (or any other application using the concept) will fail the save at all and undo the whole operation (partially again :-), or at least there will be lots of the files remaining.The question here is:Why would you like to prevent them from deleting at all?Do you want to be sure you are not losing any data?What then about the user's ability to SAVE just EMPTY FILE with the same name, if they can overwrite? You would lose data even without delete.Instead, you need backups. You can also make use of Shadow Copies of Shared Folders:http://www.microsoft.com/windowsserver2003/techinfo/overview/scr.mspxondrej.
October 9th, 2009 11:41am
> this can definitelly be done on the permission level. you just need to prevent the users Delete the file. You need to go into the Advanced settings on the Security tab of the file/folder and create a new Deny ACE for that group which Denies the Delete permission and the Delete Subfolders and Files.Hello Ondrej!I completely disagree with your solution. This is bad solution. Good solution is: just remove Delete and Delete Subfolders and Files rights for necessary groups. Also, by default Creator Owner has FullControl on their own files/folders. Therefore you need to advice to create new ACE for OWNER RIGTHS (for Vista and above) and remove above specified rights plus TakeOwnership and ChangePermissionsThanks!
[http://www.sysadmins.lv] As always enjoy the automation of tools within the Windows-based, .NET aware, WPF accessible, multi-processes on the same IP / Port usage, admin's automation tool, powershell.exe! © Flowering Weeds
Free Windows Admin Tool Kit Click here and download it now
October 9th, 2009 8:52pm


