• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 154
  • Last Modified:

Delete Permission for Share in Windows 2000

We had a customer that was running Windows NT server before we moved them onto their new server with Windows 2000 Server. We did not copy the permissions across and so had to rebuild them.

The problem is that previously in Windows NT, the customer was able to restrict deletion in the shares they had. Only the deleting was not allowed BUT everything else was allowed like modifying, renaming, creating files and folders. NOW with Windows 2000 we can't seem to ge the same permission as was allowed under Windows NT. If we gave them access to modify, they are still able to delete files and folders in the share. I tried playing around with the various permission and security settings under both the folder (share) and file level access. Have even gone to the advanced security settings to select the appropriate security settings but the closest I have come to is that users cannot delete BUT also cannot rename files that they create though they can still modify them.

What I want is the user to have ALL other rights, access, permission and security to do anything with the files and folders under the share except deleting. They SHOULD NOT have the permission to delete anything under the share as it is shared with other users and its a headache to restore from backups. Under Windows NT this was simply to do by unchecking delete but I have found out it is not so easy under Windows 2000. I just can't find the right mix and match of rights to give the users everything except the power to delete data (even the data they create. Even though they are creator or owner, should not be able to delete too)
0
fiji_islander
Asked:
fiji_islander
1 Solution
 
trywaredkCommented:
0
 
pcbratCommented:
Well fiji I am stumped to. Never realized that you couldnt setup delete without the modify. I am sure there has to be a way, so i will keep looking. To bad that you didnt check here before you migrated to W2k because there is tool called Robocopy that copies permissions on the file level.

check it out
http://support.microsoft.com/default.aspx?scid=kb;en-us;323275

But all I can offer is this tidbit http://support.microsoft.com/default.aspx?scid=kb;en-us;300691

Maybe it can help.

Good luck and keep us posted.

dawme :)
0
 
nick_sCommented:
In security - advanced - view/edit you can deny the delete permission

try it

nick
0
Free Tool: Port Scanner

Check which ports are open to the outside world. Helps make sure that your firewall rules are working as intended.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

 
pcbratCommented:
Sorry Nick that might not be a good idea

MS words below:

You should avoid using explicit Deny permissions (that is, avoid clicking to select a check box in the Deny column) unless there is no other way to achieve the permissions mix that you need. Check both the share permissions and the file and folder permissions for the user and any groups of which he or she is a member.


:)

Well keep trying fiji
0
 
fiji_islanderAuthor Commented:
Well, after much searching the internet and researching, I found out that when you can't have delete permission, you can't have modify permission as when you open a file, it creates a temp file and when you save the file, it overwrites the original file with the temp file created. Since delete is not permitted, the overwriting cannot happen and thus modifying the file fails. This is what I have learnt and told the client. Basically, no delete means no modify. Thanks for all who contributed and comented here :)
0
 
trywaredkCommented:
Have a look:
http://www.experts-exchange.com/Security/Win_Security/Q_20612987.html

Read BLUEWHALE's answer from 05/15/2003 10:26PM CEST and my answer from 05/15/2003 11:06PM CEST
0
 
Computer101Commented:
A request for deletion or PAQ has been made.  If no response or you feel this is in error, comment.  If no objection, I or another Moderator will handle this question in three days.

Computer101
E-E Admin
0
 
pcbratCommented:
Go ahead comp101 close away! :)
0
 
MindphaserCommented:
Moved to PAQ and refunded points

** Mindphaser - Community Support Moderator **
0

Featured Post

Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now