ivicker
asked on
The Permissions Challenge
Windows 2k3 Sbs Server
Need to setup permissions as follows:
All paths are ficticious
the server folder d:\company is shared as "company" and mapped on to clients as g:
there are loads of folders under G:
1. we want to prevent people from creating, deleting and moving files and folders IN THE ROOT folder only.
2 the sub-folders of G\ should allow the creation, deletion, movng of files and folders as people wish.
3. one of the subfolders of G\ (g:\existing clients) must be set to prevent the creation, deletion and moving of files and folders within its root only. the subfolders of g:\existing clients should allow the creation , deletion and moving of files.
I have created a sec group called g_no_modify and added the said users to that group.
any help would be apreciated as i have already lost all my hair over this
Cheers
Need to setup permissions as follows:
All paths are ficticious
the server folder d:\company is shared as "company" and mapped on to clients as g:
there are loads of folders under G:
1. we want to prevent people from creating, deleting and moving files and folders IN THE ROOT folder only.
2 the sub-folders of G\ should allow the creation, deletion, movng of files and folders as people wish.
3. one of the subfolders of G\ (g:\existing clients) must be set to prevent the creation, deletion and moving of files and folders within its root only. the subfolders of g:\existing clients should allow the creation , deletion and moving of files.
I have created a sec group called g_no_modify and added the said users to that group.
any help would be apreciated as i have already lost all my hair over this
Cheers
ASKER
I have tried this already, but it still doesnt prevent me from partially moving a folder from the root to a child folder.
any other suggestions
any other suggestions
Unfortunately for "move" you have to set an explicit permisssion on the folders you don't want moved, which you'll have to stop from inheriting -- using deny to stop the move on the explicit NTFS permission.
ASKER
When I set the permissions, when I set the deny delete, it also prevents me from creating new folders. is there any way for this to be implemented at all?
Basicly I want my users to be able to create files and folders, but not delete them afterwards, does this make sense, is it possible? HELP!!
Basicly I want my users to be able to create files and folders, but not delete them afterwards, does this make sense, is it possible? HELP!!
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Break the inheritance (but COPY the permissions downstream).
Change the permissions on the root to your restricted version.
Do the same process for your subfolder.
That should achieve what you're wanting.