deny delete folders/files from a shared folder on the network

deny delete folders/files from a shared folder on the network

Secure Home | Search | About
 Microsoft Applications Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
deny delete folders/files from a shared folder on the network Sean 09-19-2006
Posted by =?Utf-8?B?U2Vhbg==?= on September 19, 2006, 6:56 am
If you were  Registered and logged in, you could reply and use other advanced thread options
Hi,
I have a windows 2000 SBS server. I wish to deny users the right to delete
folders/files and subfolders/subfiles from a network drive. I have given the
group 'everyone' access to just read and execute, list folder contents, read
and write permissions but it does not allow them to 'save as'. Any one have
any ideas?
Regards
Sean

Posted by Roger Abell [MVP] on September 19, 2006, 10:29 am
If you were  Registered and logged in, you could reply and use other advanced thread options
If in the NTFS you do limit their ability to delete folders, but leave
their permissions to do so with files (which you can do by granting
separately to "Files only" and to "This folder and subfolders" after
you have accessed the Advanced tab in the NTFS permissions
dialog and then Edited the individual grants) you will have what you
have stated you want, but you will still have issues.

First before I forget, you indicated you have granted write of
permissions, which you should not be doing if you want to have
what you set enforce unchanged as you have set it).

Let us say you grant at the root of the storage area
Administrators Full for "This folder, subfolders and files"
Users List for "This folder and subfolders"
Users Modify for "Files only"

You will then be close to what you have said you want.
But, if some user drags large sections of the storage and drops
it somewhere else with a Move operation, what you will see is
that the original is left as a (at least partly) empty structure.
The file moves are allowed, but when the first attempt to remove
a directory comes along, things then fail.
That is an issue that is part and parcel with granting Modify
for the files, which includes delete.

Now, you can get ride of this issue, and still provide for the
Save As scenario in many cases if you just remove the Delete
check inside the detail view of the Modify grant.
What happens then is that some things, like the Office suite,
cannot save, as they do so by renaming a temp file; and the
other thing is that users get frustrated in that they cannot just
remove or rename something they have put there (at least, not
without first changing the permissions).

> Hi,
> I have a windows 2000 SBS server. I wish to deny users the right to
> delete
> folders/files and subfolders/subfiles from a network drive. I have given
> the
> group 'everyone' access to just read and execute, list folder contents,
> read
> and write permissions but it does not allow them to 'save as'. Any one
> have
> any ideas?
> Regards
> Sean



Similar ThreadsPosted
Making a shared folder accessible to anyone from network August 13, 2006, 7:01 am
How to force a (the same !) user to logon when connecting to a network shared folder ? March 4, 2007, 8:19 am
SBS 2003 Continual Reconnect Disconnect from shared network folder March 4, 2007, 12:56 pm
Can change owner of folder when deny in place February 28, 2006, 5:19 am
Folder permissions - deny users, allow administrator November 16, 2007, 12:38 pm
Shared Folder Forensics November 14, 2005, 8:39 am
Shared Folder Permission April 21, 2007, 6:36 am
Problem with Shared folder December 29, 2007, 3:41 pm
Auditing shared folder April 7, 2008, 1:02 pm
Shared folder security settings June 24, 2005, 9:08 am

The site map in XML format XML site map

Contact Us | Privacy Policy