NTFS Rename vs Delete permissions

NTFS Rename vs Delete permissions
Secure Home | Search | About
Login Password
Register Now! Lost Password?
 Microsoft Applications Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
NTFS Rename vs Delete permissions Bret 02-28-2006
Posted by =?Utf-8?B?QnJldA==?= on February 28, 2006, 2:07 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
I am aware that in order to rename files, a user requires delete rights in
NTFS.

Wondering if anyone out there is aware of scripts, utilities or products
that would allow the functionality of allowing a user to rename a file or
folder without allowing them to delete the same file or folder.

My searching has been fruitless so far.

Thanks in advance for any help

Posted by AllenM on February 28, 2006, 2:17 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Use the advance NTFS features where you can Deny "Deleting Files/Folders and
give them Modify rights.

>I am aware that in order to rename files, a user requires delete rights in
> NTFS.
>
> Wondering if anyone out there is aware of scripts, utilities or products
> that would allow the functionality of allowing a user to rename a file or
> folder without allowing them to delete the same file or folder.
>
> My searching has been fruitless so far.
>
> Thanks in advance for any help



Posted by =?Utf-8?B?QnJldA==?= on February 28, 2006, 2:30 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
That does not work because a rename is technically a delete/create operation.
We have tested this and have had no love

"Bret" wrote:

> I am aware that in order to rename files, a user requires delete rights in
> NTFS.
>
> Wondering if anyone out there is aware of scripts, utilities or products
> that would allow the functionality of allowing a user to rename a file or
> folder without allowing them to delete the same file or folder.
>
> My searching has been fruitless so far.
>
> Thanks in advance for any help

Posted by Roger Abell [MVP] on March 1, 2006, 1:52 am
If you were  Registered and logged in, you could reply and use other advanced thread options
The problem you run into is that some principal needs to have the
grant. In order for the user without that grant to execute something
that does, that something needs to run as some other principal.
Traditionally people have evolved services as one way to do this.
Unless I am mistaken the CAS permission model of .Net presents
a new avenue if the CAS policies are defined correctly, but one
would need to be pretty careful so as to not allow more than is
intended.

>I am aware that in order to rename files, a user requires delete rights in
> NTFS.
>
> Wondering if anyone out there is aware of scripts, utilities or products
> that would allow the functionality of allowing a user to rename a file or
> folder without allowing them to delete the same file or folder.
>
> My searching has been fruitless so far.
>
> Thanks in advance for any help



Similar ThreadsPosted
Permissions to Rename a Computer within an AD domain February 16, 2006, 10:10 am
NTFS Permissions September 12, 2005, 8:49 am
NTFS Permissions January 30, 2006, 5:33 am
NTFS Permissions March 24, 2006, 7:02 am
NTFS permissions November 29, 2006, 5:32 am
Re: NTFS Permissions May 23, 2008, 2:41 am
NTFS Permissions and rights October 9, 2005, 5:29 pm
NTFS permissions isses November 28, 2005, 6:41 pm
Homedirs - NTFS permissions April 30, 2008, 5:49 am
list NTFS permissions July 30, 2008, 1:40 pm

The site map in XML format XML site map

Contact Us | Privacy Policy