Stop Users Deleting and Moving Files

Stop Users Deleting and Moving Files
Secure Home | Search | About
Login Password
Register Now! Lost Password?
 Microsoft Applications Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
Stop Users Deleting and Moving Files Jay 06-16-2006
Posted by =?Utf-8?B?SmF5?= on June 16, 2006, 10:21 am
If you were  Registered and logged in, you could reply and use other advanced thread options
I have tried to set the permissions on a directory and its sub directories so
that users cannot delete the folders or the files contained within. By
stopping inheritable rights and "denying" delete files and folders and delete
users cannot delete these items. However, they cannot then save an existing
document as another name or create new documents.

The most important thing I need to do is stop users deleting folders I am
less worried about the files. Is it possible.

many thanks

Jay

Posted by Steven L Umbach on June 16, 2006, 11:58 am
If you were  Registered and logged in, you could reply and use other advanced thread options
When configuring permissions in such a situation use NTFS special
permissions in the advanced page and keep in mind that users can have
separate permissions for each possibility under the "apply onto" box such as
one set of permissions for folders and subfolders and then another for files
only. If you look at the advanced permissions of the root/drive folder you
probably will see users listed three times as an example of using special
permissions. In your case you want to make sure that they do not have
modify/delete permissions to folders and possibly subfolders as your
situation may dictate and then give them whatever permissions are needed for
files only. The link below explains more. Users usually get tripped up
trying to configure permissions only for folders, subfolders, and files.
Once you understand special permissions you will see that you have
tremendous flexibility configuring NTFS permissions. --- Steve

http://support.microsoft.com/default.aspx?scid=kb;EN-US;308419

>I have tried to set the permissions on a directory and its sub directories
>so
> that users cannot delete the folders or the files contained within. By
> stopping inheritable rights and "denying" delete files and folders and
> delete
> users cannot delete these items. However, they cannot then save an
> existing
> document as another name or create new documents.
>
> The most important thing I need to do is stop users deleting folders I am
> less worried about the files. Is it possible.
>
> many thanks
>
> Jay



Posted by Roger Abell [MVP] on June 17, 2006, 1:10 am
If you were  Registered and logged in, you could reply and use other advanced thread options
In addition to the directions provided by Steve, I note that you say
you have been using Deny. Whenever possible state permissions
positively, i.e. List (for this folder and subfolders) and Modify (for
files only). Using Deny, sooner or later, will lead you into unexpected,
although as defined, behaviors due to how explicit Grant can override
inherited Deny.

--
Roger Abell
Microsoft MVP (Windows Server : Security)
MCDBA, MCSE W2k3+W2k+Nt4
>I have tried to set the permissions on a directory and its sub directories
>so
> that users cannot delete the folders or the files contained within. By
> stopping inheritable rights and "denying" delete files and folders and
> delete
> users cannot delete these items. However, they cannot then save an
> existing
> document as another name or create new documents.
>
> The most important thing I need to do is stop users deleting folders I am
> less worried about the files. Is it possible.
>
> many thanks
>
> Jay



Similar ThreadsPosted
How to prevent users from deleting Word/Excel files in a Share? May 14, 2008, 9:45 pm
How to Prevent Users from Moving Folders April 25, 2007, 7:32 am
Why am I deleting these files June 12, 2008, 9:36 am
Deleting TEMP files in C:\ April 1, 2006, 4:46 am
controlling deleting of files with NTFS June 27, 2007, 12:50 pm
Deleting Archived Certificates from Users' My store on Workstations July 8, 2008, 3:50 pm
Stop users installing Google Earth October 11, 2005, 12:09 am
Stop users installing Google Earth October 11, 2005, 12:31 am
How to give multiple users access to encrypted files. June 26, 2006, 6:22 pm
How to prevent users on unauthorized machines from w2k3 files November 27, 2007, 4:23 pm

The site map in XML format XML site map

Contact Us | Privacy Policy