Folder Permissions problem

Posted on 2005-04-08
Last Modified: 2010-04-18
I asked this question in the Security area and am not getting much help.  Thought I would try reposting it here.

I have the following structure on a server \\Servername\sharename\folder.  Inside of folder I would like to create a structure and have NTFS enforce it so nobody can add edit or delete the file folders. That is to say they should not be able to add their own folders, and they should not be able to do anything to the folders I create under the share. However, They should be able to add edit and delete files.

As to permissions, I have right clicked the folder gone to security and then selected the advanced button.  From here I have the following options for security.

1) Traverse Folder / Execute File  Checked
2) List Folder / Read Data  Checked
3) Read Attributes Checked
4) Read Extended Attributes Checked
5) Create Files / Write Data Checked
6) Create Folders / Append Data UnChecked
7) Write Attributes Checked
8) Write Extended Attributes Checked
9)Delete Sub Folders and Files Unchecked
10) Delete Checked
11) Read Permissions Checked
12)  Change Permissions UnChecked
13) Take Ownership UnChecked
14) Full COntrol Unchecked

This is for the allow entry.  The deny entry is as follows.

Numbers 6, 9 12 and 14 are unchecked.

With these settings I get what I'm looking for on the folder security.  However, If a user edits a file they are not allowed to save it except to a new file name.

It does appear that these setting cause the modify permissions under the basic permissions to be unchecked.  Is there a way of doing this?

Thanks for the help in advance.
Question by:Guitarman316
    LVL 18

    Expert Comment

    Take a look at this PAQ...not exactly the same, but may help give you some ideas. NTFS permissions can be very complex.
    LVL 18

    Accepted Solution

    LVL 13

    Assisted Solution

    All you would have to do is.

    Go to the folder. Right Click it and select Properties
    Go to the security tab.
    Select Advanced.  Click Add.  Select the User you want to be able to add, modify, Delete the files.
    A permissions box will the pop up.  Change the Apply  onto box to say "files only".
    Give the user modify permissions or full control.

    This will allow them to have full control or modify control on the files but not the folders or subfolders.  Therefore they will not be able to change any of the folders you setup

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Threat Intelligence Starter Resources

    Integrating threat intelligence can be challenging, and not all companies are ready. These resources can help you build awareness and prepare for defense.

    This may not be a text book method to resolve VSS backup issues but it seemed to have worked on few of the Windows 2003 servers we had issues while performing a Volume Shadow Copy backup. If you have issues while performing a shadow copy backup usin…
    I've always wanted to allow a user to have a printer no matter where they login. The steps below will show you how to achieve just that. In this Article I'll show how to deploy printers automatically with group policy and then using security fil…
    Need more eyes on your posted question? Go ahead and follow the quick steps in this video to learn how to Request Attention to your question. *Log into your Experts Exchange account *Find the question you want to Request Attention for *Go to the e…
    Hi everyone! This is Experts Exchange customer support.  This quick video will show you how to change your primary email address.  If you have any questions, then please Write a Comment below!

    761 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    15 Experts available now in Live!

    Get 1:1 Help Now