Delete Permission for Share in Windows 2000

Posted on 2003-03-12
Medium Priority
Last Modified: 2010-04-13
We had a customer that was running Windows NT server before we moved them onto their new server with Windows 2000 Server. We did not copy the permissions across and so had to rebuild them.

The problem is that previously in Windows NT, the customer was able to restrict deletion in the shares they had. Only the deleting was not allowed BUT everything else was allowed like modifying, renaming, creating files and folders. NOW with Windows 2000 we can't seem to ge the same permission as was allowed under Windows NT. If we gave them access to modify, they are still able to delete files and folders in the share. I tried playing around with the various permission and security settings under both the folder (share) and file level access. Have even gone to the advanced security settings to select the appropriate security settings but the closest I have come to is that users cannot delete BUT also cannot rename files that they create though they can still modify them.

What I want is the user to have ALL other rights, access, permission and security to do anything with the files and folders under the share except deleting. They SHOULD NOT have the permission to delete anything under the share as it is shared with other users and its a headache to restore from backups. Under Windows NT this was simply to do by unchecking delete but I have found out it is not so easy under Windows 2000. I just can't find the right mix and match of rights to give the users everything except the power to delete data (even the data they create. Even though they are creator or owner, should not be able to delete too)
Question by:fiji_islander
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
LVL 12

Expert Comment

ID: 8128355
LVL 10

Expert Comment

ID: 8129130
Well fiji I am stumped to. Never realized that you couldnt setup delete without the modify. I am sure there has to be a way, so i will keep looking. To bad that you didnt check here before you migrated to W2k because there is tool called Robocopy that copies permissions on the file level.

check it out

But all I can offer is this tidbit http://support.microsoft.com/default.aspx?scid=kb;en-us;300691

Maybe it can help.

Good luck and keep us posted.

dawme :)

Expert Comment

ID: 8131589
In security - advanced - view/edit you can deny the delete permission

try it

What Is Blockchain Technology?

Blockchain is a technology that underpins the success of Bitcoin and other digital currencies, but it has uses far beyond finance. Learn how blockchain works and why it is proving disruptive to other areas of IT.

LVL 10

Expert Comment

ID: 8131638
Sorry Nick that might not be a good idea

MS words below:

You should avoid using explicit Deny permissions (that is, avoid clicking to select a check box in the Deny column) unless there is no other way to achieve the permissions mix that you need. Check both the share permissions and the file and folder permissions for the user and any groups of which he or she is a member.


Well keep trying fiji

Author Comment

ID: 8547684
Well, after much searching the internet and researching, I found out that when you can't have delete permission, you can't have modify permission as when you open a file, it creates a temp file and when you save the file, it overwrites the original file with the temp file created. Since delete is not permitted, the overwriting cannot happen and thus modifying the file fails. This is what I have learnt and told the client. Basically, no delete means no modify. Thanks for all who contributed and comented here :)
LVL 12

Expert Comment

ID: 8553714
Have a look:

Read BLUEWHALE's answer from 05/15/2003 10:26PM CEST and my answer from 05/15/2003 11:06PM CEST

Expert Comment

ID: 8580305
A request for deletion or PAQ has been made.  If no response or you feel this is in error, comment.  If no objection, I or another Moderator will handle this question in three days.

E-E Admin
LVL 10

Expert Comment

ID: 8587183
Go ahead comp101 close away! :)

Accepted Solution

Mindphaser earned 0 total points
ID: 8598006
Moved to PAQ and refunded points

** Mindphaser - Community Support Moderator **

Featured Post

Free Tool: Port Scanner

Check which ports are open to the outside world. Helps make sure that your firewall rules are working as intended.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
In this modest contribution, I want to share with the IT community (especially system administrators, IT Support Engineers and IT Help Desks) about Windows crashes/hangs and how to deal with these particular problems.
In this video you will find out how to export Office 365 mailboxes using the built in eDiscovery tool. Bear in mind that although this method might be useful in some cases, using PST files as Office 365 backup is troublesome in a long run (more on t…
In this video, Percona Solutions Engineer Barrett Chambers discusses some of the basic syntax differences between MySQL and MongoDB. To learn more check out our webinar on MongoDB administration for MySQL DBA: https://www.percona.com/resources/we…

777 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question