they had full apart from "delete" and "delete subfolders and files" which was deny
Main Topics
Browse All TopicsI have a windows 2003 sbs server.
We have a Data folder, with various shared folders and sub folders + files.
people delete folders by mistake, rather annoying. I need to implement a permission which will allow everything but the deleting of folders inc subfolders.
when i attempt, i select advanced perms and deny "delete" and "delete subfolders and files" (if the latter isnt selected folders can still be deleted)
this works in that, users cannot delete folders, however, they also cannot change the folder names, or even, when creating a new folder, change the name from "new folder".
i just cannot work it out? surely it should be simple...
This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.
Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.
If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.
Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.
Access the answers to your technology questions today.
30-day free trial. Register in 60 seconds.
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.

Try it out and discover for yourself.
30-day free trial. Register in 60 seconds.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
Go down one level and check your permissions, you will most likely find that the permissions either have not been applied allowing modify/create, or a deny exists for them.
Deny always takes precedence.
alternately, go into advanced, and configure your permissions a bit more, and make sure you click apply to all subfolders & files.
Hmm ive had a quick look at this and theres two solutions i would consider,
1. dont use special permissions and configure shadow copies to ensure easy restore of deleted files, very annoying but still .
2. set parent folder to deny from "delete" and "delete subfolders and files but apply it only to "files only", you would have to do a little planning to make sure this propogates properly down the folder tree, and you may have to configure this for each folder, but this will stop anyone delting files and also deleting folders that have any files in, however you will still be able to rename the folders
DT
Also files such as microsoft office when opened create another file to lock the file for editing while its in use, normally these are deleted when when you close the file automatically, these will not be deleted and you could end up with loads of the record locking files you will have to delete manually with the correct permissions
I have the same issue, where users constantly delete things accidentally, after experimenting with the above solution i found it easier to get people to contact the helpdesk the moment they realize something has been deleted, using shadow copies i am able to restore the missing files within seconds which eneded up being a better solution.
Moving forward as these were logged jobs i could identify who the main culprits were and try and recommend them for extra training or get their managers to take them aside.
ive been doing this for almost a year we have 450 employees and we get probably 1 of these accidental deletions a month, compared to 40 or 50 a month prior to this.
DT
Business Accounts
Answer for Membership
by: ComputerTechiePosted on 2009-06-17 at 15:00:19ID: 24653081
You need to allow them to Modify, Read & Execute
CT