• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 392
  • Last Modified:

stop user from deleting files on a shared drive

I am missing two directories entirly on my server. I would like to setup my users so they cannot delete anything. I tried to audit file access but i dont get to see which file they deleted only that a file was deleted. I think the best way is to not allow anyone to delets . Its a database server, file server and app server. thanks
0
RALPHQC
Asked:
RALPHQC
2 Solutions
 
puterheadCommented:
remove the modify or full control permissions on the folders by right clicking on the folder and going to the security tab. Allow only adimistrators modify or full control.
0
 
theras2000Commented:
Yeah deleting access just comes under modifying.  And if you want your users to use the files properly, they need modify.
So I'm a it lost.  Are you trying to: (a) find the culprit, (b) find the deleted file/s, or (c) prevent the culprit from deleting files.  Well if (a), it sounds like you alreay have the culprit.  If (c), then you have to deny that user modify access, or keep a backup and restore when desired.  If (b), then you really need a copy of the files to compare to every day.

The way that I know of (there's probably many), is to use a program called robocopy.  Its now part of the MS Resource Kit, but you can download separately here http://www.devhood.com/tools/tool_details.aspx?tool_id=321
It'll take you some time to learn and practise the switches.  You'd want to setup 2 scripts: 1 that mirrors all the folders/folders to somewhere else (a full replica) and then 1 that does a simulated copy, only logging the files that differ.  You culd run the 2nd script to check what has changed.  Then  when you're happy, run the 1st one to copy the updated files to your backup.
It's a lot of work, but I think any solution will be that involves you constantly monitoring which files are getting deleted and trying to replace them.  Better to find the source (the user) and cutoff the problem (modify access) for that user.
0
 
minthor11Commented:
Under the security settings tab for the properties of a folder, you should see an advanced button towards the bottom. If you click on that it will bring up a new window that appears ot have more options. If you click on one of the users/groups that you are applying permissions to and click the edit button, it will give you a whole host of options you can define, one of them being "Delete". If you uncheck that allow box or explicitly deny that right, it will make your users unable to delete those files.
0
Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 
bbaoIT ConsultantCommented:
here is the official guide from MS. it is suitable for Windows servers as well such as W2K and W2K3.

How to set, view, change, or remove special permissions for files and folders in Windows XP
http://support.microsoft.com/kb/308419

"Delete

The Delete permission allows or denies the user from deleting the file or folder. If you do not have a Delete permission on a file or folder, you can delete the file or folder if you are granted Delete Subfolders and Files permissions on the parent folder."

hope it helps,
bbao
0
 
peakpeakCommented:
Another way is to use Shadow Copy. Have it to run like 3 times a day for the directories you want to protect. Then its very easy to restore a specific version of any file. It's built-in and free.
http://www.youtube.com/watch?v=EcJs5JKexZ0
0
 
RALPHQCAuthor Commented:
if a user creates a file he can still delete it. I could not stop people from deleting their own files.
0
 
bbaoIT ConsultantCommented:
> if a user creates a file he can still delete it.

if the user has no Full Control access to the folder, by removing the Delete File permission, the user can't delete the file after creating it.
0

Featured Post

Hire Technology Freelancers with Gigs

Work with freelancers specializing in everything from database administration to programming, who have proven themselves as experts in their field. Hire the best, collaborate easily, pay securely, and get projects done right.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now