azlaw
asked on
Setting NTFS permissions for folders
Hello
I am running server 2003 small business edition. I have been running into problems setting permissions on a paticular shared folder. Users need to be able to access, write, save under the same name, save as a different name, and change the name of the files in the shared folder. Users must not be able to delete, move, and cut the files in the folder. Currently, "shared" and "NTFS" permissions are set on the folder. I heard that it is not good to set "shared" and "NTFS" permissions at the same time. If I set only NTFS permissions, does that mean I do not share the folder? If so, then will the users be able to see the folder if it is not shared and only NTFS permissions are set? What is the best way to go about setting this up?
Thanks
I am running server 2003 small business edition. I have been running into problems setting permissions on a paticular shared folder. Users need to be able to access, write, save under the same name, save as a different name, and change the name of the files in the shared folder. Users must not be able to delete, move, and cut the files in the folder. Currently, "shared" and "NTFS" permissions are set on the folder. I heard that it is not good to set "shared" and "NTFS" permissions at the same time. If I set only NTFS permissions, does that mean I do not share the folder? If so, then will the users be able to see the folder if it is not shared and only NTFS permissions are set? What is the best way to go about setting this up?
Thanks
ASKER
Im sorry, I forgot to mention that I have subfolders in the shared folder. I also have permissions set on the subfolders too. The files in the subfolders is what is important. Ill explain again. I have a shared folder on the server called "Files", shared and NTFS permissions are set on it. I have a subfolder called "Clients", shared and NTFS permissions are set on it too. The files in the subfolder "Clients" are the ones that users need to access, write, and save to. The only thing that I dont want them to do is to have the ability to delete files and move them, anything else is ok.
Sorry for the confusion
Thanks
Sorry for the confusion
Thanks
I wouldn't give full control on the shared folder, as this will allow the use to change the sharing control on a folder, he might then be able to dissallow access to this shared folder.
on the ntfs security level you can click on the advanced tab where there are more attributes, one of them being the "delete" attribute.
on the ntfs security level you can click on the advanced tab where there are more attributes, one of them being the "delete" attribute.
>>as this will allow the use to change the sharing control on a folder<<
Negative. Our entire corporation is setup like this - you cannot change the shares if you have full control via the share only.
Remember, effective perms are the most restrictive of the two.
Negative. Our entire corporation is setup like this - you cannot change the shares if you have full control via the share only.
Remember, effective perms are the most restrictive of the two.
ASKER
So, I should only set the NTFS permissons on the subfolder and not the shared folder?
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Then lock it down with the NTFS permissions (effective permissions are the 'most' restrictive of the two).
If they come in the share with full control and are only given read on the disk, that's all they'll have effectively is read access.
To remove delete permissions -
From the security tab, Advanced
Highlight the group you want, and click Edit
Click Full Control to select all
Then click Deny on Delete & Delete subfolders.
This 'should' also prevent a "move" - although a move is technically a copy and then a delete, so they'll probably still be able to copy...