|
Posted by Roger Abell [MVP] on September 19, 2006, 10:29 am
If you were Registered and logged in, you could reply and use other advanced thread options
If in the NTFS you do limit their ability to delete folders, but leave
their permissions to do so with files (which you can do by granting
separately to "Files only" and to "This folder and subfolders" after
you have accessed the Advanced tab in the NTFS permissions
dialog and then Edited the individual grants) you will have what you
have stated you want, but you will still have issues.
First before I forget, you indicated you have granted write of
permissions, which you should not be doing if you want to have
what you set enforce unchanged as you have set it).
Let us say you grant at the root of the storage area
Administrators Full for "This folder, subfolders and files"
Users List for "This folder and subfolders"
Users Modify for "Files only"
You will then be close to what you have said you want.
But, if some user drags large sections of the storage and drops
it somewhere else with a Move operation, what you will see is
that the original is left as a (at least partly) empty structure.
The file moves are allowed, but when the first attempt to remove
a directory comes along, things then fail.
That is an issue that is part and parcel with granting Modify
for the files, which includes delete.
Now, you can get ride of this issue, and still provide for the
Save As scenario in many cases if you just remove the Delete
check inside the detail view of the Modify grant.
What happens then is that some things, like the Office suite,
cannot save, as they do so by renaming a temp file; and the
other thing is that users get frustrated in that they cannot just
remove or rename something they have put there (at least, not
without first changing the permissions).
> Hi,
> I have a windows 2000 SBS server. I wish to deny users the right to
> delete
> folders/files and subfolders/subfiles from a network drive. I have given
> the
> group 'everyone' access to just read and execute, list folder contents,
> read
> and write permissions but it does not allow them to 'save as'. Any one
> have
> any ideas?
> Regards
> Sean
|