stop user from deleting files on a shared drive

Posted on 2009-04-23
Last Modified: 2013-12-23
I am missing two directories entirly on my server. I would like to setup my users so they cannot delete anything. I tried to audit file access but i dont get to see which file they deleted only that a file was deleted. I think the best way is to not allow anyone to delets . Its a database server, file server and app server. thanks
Question by:RALPHQC
    LVL 1

    Expert Comment

    remove the modify or full control permissions on the folders by right clicking on the folder and going to the security tab. Allow only adimistrators modify or full control.
    LVL 14

    Expert Comment

    Yeah deleting access just comes under modifying.  And if you want your users to use the files properly, they need modify.
    So I'm a it lost.  Are you trying to: (a) find the culprit, (b) find the deleted file/s, or (c) prevent the culprit from deleting files.  Well if (a), it sounds like you alreay have the culprit.  If (c), then you have to deny that user modify access, or keep a backup and restore when desired.  If (b), then you really need a copy of the files to compare to every day.

    The way that I know of (there's probably many), is to use a program called robocopy.  Its now part of the MS Resource Kit, but you can download separately here
    It'll take you some time to learn and practise the switches.  You'd want to setup 2 scripts: 1 that mirrors all the folders/folders to somewhere else (a full replica) and then 1 that does a simulated copy, only logging the files that differ.  You culd run the 2nd script to check what has changed.  Then  when you're happy, run the 1st one to copy the updated files to your backup.
    It's a lot of work, but I think any solution will be that involves you constantly monitoring which files are getting deleted and trying to replace them.  Better to find the source (the user) and cutoff the problem (modify access) for that user.
    LVL 1

    Accepted Solution

    Under the security settings tab for the properties of a folder, you should see an advanced button towards the bottom. If you click on that it will bring up a new window that appears ot have more options. If you click on one of the users/groups that you are applying permissions to and click the edit button, it will give you a whole host of options you can define, one of them being "Delete". If you uncheck that allow box or explicitly deny that right, it will make your users unable to delete those files.
    LVL 36

    Assisted Solution

    by:Bing CISM / CISSP
    here is the official guide from MS. it is suitable for Windows servers as well such as W2K and W2K3.

    How to set, view, change, or remove special permissions for files and folders in Windows XP


    The Delete permission allows or denies the user from deleting the file or folder. If you do not have a Delete permission on a file or folder, you can delete the file or folder if you are granted Delete Subfolders and Files permissions on the parent folder."

    hope it helps,
    LVL 28

    Expert Comment

    Another way is to use Shadow Copy. Have it to run like 3 times a day for the directories you want to protect. Then its very easy to restore a specific version of any file. It's built-in and free.

    Author Comment

    if a user creates a file he can still delete it. I could not stop people from deleting their own files.
    LVL 36

    Expert Comment

    by:Bing CISM / CISSP
    > if a user creates a file he can still delete it.

    if the user has no Full Control access to the folder, by removing the Delete File permission, the user can't delete the file after creating it.

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Better Security Awareness With Threat Intelligence

    See how one of the leading financial services organizations uses Recorded Future as part of a holistic threat intelligence program to promote security awareness and proactively and efficiently identify threats.

    If you are a user of the discontinued Microsoft Office Accounting 2008 (MSOA) and have to move to a new computer running Windows 8, you will be unhappy to discover that it won't install.  In particular, Microsoft SQL Server 2005 Express Edition (SSE…
    A quick step-by-step overview of installing and configuring Carbonite Server Backup.
    In this seventh video of the Xpdf series, we discuss and demonstrate the PDFfonts utility, which lists all the fonts used in a PDF file. It does this via a command line interface, making it suitable for use in programs, scripts, batch files — any pl…
    In this tutorial you'll learn about bandwidth monitoring with flows and packet sniffing with our network monitoring solution PRTG Network Monitor ( If you're interested in additional methods for monitoring bandwidt…

    760 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    9 Experts available now in Live!

    Get 1:1 Help Now