asked on

conflicting domain rights, folder permissions

Is there a way to grant users on a Server 2003 domain the right to create files and folders on a network share that denies them the right to delete files and/or folders, as well as denies them the right to modify an existing file/folder? The only problem I run into is that they can delete the files they create, as well as delete the files they create. This sounds like an impossibility, but I thought I'd get a second or third opinion.

Thanks in advance.

ormerodrutter

I think you can achieve it by opening the properties of that shared folder and go to the Security tab, choose CREATOR OWNER and deny Modify right.

effincomputers

ASKER

I think this might get in the way of creators and owners from other groups, who have the right to create , modify, and delete from being able to do this. Similar to this kind of a solution, I've tried denying the targeted group from being able to take ownership. But that isn't helping.

goban

Usually a "Deny" setting will take precedence over an "Allow". Instead of using "deny" try removing/unchecking "Allow".

effincomputers

ASKER

Hi Goban. Are you referring to: "Security tab, choose CREATOR OWNER and deny Modify right."? If so, this wouldn't prevent owners of other files that should have more advanced privileges from exercising them?

ASKER CERTIFIED SOLUTION

goban

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial