grant modify rights to subfolders under a read only root folder

Posted on 2005-05-04
Last Modified: 2013-12-04
This issue has been my focus for the better part of the day and would make my day/week if a remedy could be found.

The scenario is:
an entire department has a mapped shared drive to which they do all their work.
Due to various changes that have been made, the managers would like users to be unable to add/delete any folders in that root folder, but have modify rights on all subfolders and files contained within.

What I have done is created two groups: Moderators and Users.
The Moderators have modify rights from the root down...not a problem.

The problem comes when I attempt to restrict permissions to the root and open up permissions on all of the subfolders and files contained.
I have tried a number of different ways to accomplish this, but the results are either too much access or not enough.

Does anyone have a way to make this happen?

Thank you in advance.

Question by:carrizosa_md
    LVL 16

    Expert Comment

    I do believe that you can do this , using the 'Advanced' button under security. You can share with Full Control, and then use NTFS to lock it down. In the Advanced options, you can select to apply the permission to just the folder, or to just the files and subfolders. Also, make sure that you turn off the 'inherit permissions from above' checkbox so that doesn't confuse things.

    I'll do a test and let you know if I get it working...

    Author Comment

    I have played with these settings over and over again, but was unable to make the correct settings stick. If the permissions were reversed and the root was to be wide open and the subfolders locked down, this would be no problem.

    I finally went the long way around and locked down the root, broke inheritence on the subfolders, gave explicit permissions all at once to all the subfolders by removing all permissions and adding what I needed. Also, checking inheritence on all 3rd level subfolders.

    This should work fine for now, but if other subfolders are created by the moderators they would have to be set with the proper permissions for each instance or give change permissions to the moderators to do it themselves.

    We all know how that might turn out.

    I thought there might be an eaisier, automated process for taking care of this.

    LVL 16

    Accepted Solution

    I don't think there is any automated way...unless maybe some 3rd party tools can do it.

    Author Comment

    Thanks for your effort !!!!!

    Featured Post

    Maximize Your Threat Intelligence Reporting

    Reporting is one of the most important and least talked about aspects of a world-class threat intelligence program. Here’s how to do it right.

    Join & Write a Comment

    Suggested Solutions

    In today's information driven age, entrepreneurs have so many great tools and options at their disposal to help turn good ideas into a thriving business. With cloud-based online services, such as Amazon's Web Services (AWS) or Microsoft's Azure, bus…
    Security measures require Windows be logged in using Standard User login (not Administrator).  Yet, sometimes an application has to be run “As Administrator” from a Standard User login.  This paper describes how to create a shortcut icon to launch a…
    Need more eyes on your posted question? Go ahead and follow the quick steps in this video to learn how to Request Attention to your question. *Log into your Experts Exchange account *Find the question you want to Request Attention for *Go to the e…
    Internet Business Fax to Email Made Easy - With eFax Corporate (, you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, fr…

    729 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    21 Experts available now in Live!

    Get 1:1 Help Now