I am working on secuirty permissions for a folder in windows 2008 R2 AD environment. As for an education environment - staff will have this folder which is not an issue. However for students they will be able to browse the folder, subfolder and save their assignments on any subfolders. Sametime they will not be able to rename any folder/subfolder, delete files other than their own files and re-save any files. Can some one point me to a good solution? This is what I did so far - On parent folder - Deny for files - list folder,read data, read attributes,read extended attributes Deny - create folder / append data on subfolder level Deny - create folder/append data, create files/write dta on Folder Level Allow - traverse, read data, read attributes on Folder,subfolder and file level Allow - create files write data, create folder append data on File Level It works pretty good as long as the students drag their files. However if they try to save a file (word, excel,photoshop CS5) to that location they get access denied error - however this works with notepad,word pad - not sure if the office products or similar need a different permissions. I think there might be an easier way to do it. Any help is much appreciated. Thanks

Hi, I realize that you have denied creating files on folder level. Please check if it applied to “This folder, subfolders and files” or others? Please make sure that it is applied to “This folder only”. In addition, you may also check the sharing permission. For more information, please also refer to the following Microsoft articles: How to set, view, change, or remove special permissions for files and folders in Windows XP http://support.microsoft.com/kb/308419 Managing Permissions for Shared Folders http://technet.microsoft.com/en-us/library/cc753731.aspx Regards,Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.