Solved

Creating permanent top level folders in a windows file sharing evironment

Posted on 2009-05-19
1
224 Views
Last Modified: 2013-12-04
Anyone have an idea for how to lock in a top level heirarchy in windows server 2003 (running active directory)? I have a share-point set up with several top level folders that have various sets of permissions. Recently I've had a request to lock down the top level heirarchy so that no one can move, rename, or delete top level folders (or add new ones). So even if "Bob" from the "Accounting" department has full write access to the items within the top level Accounting folder, he can not move, delete, or rename the folder itself.

I've experimented a little with the special permissions but haven't yet found a working scheme and easy way of implementing. Seems like it might require clever uses of the parent-child propagation option and advanced permissions management...
0
Comment
Question by:steiner470
1 Comment
 
LVL 19

Accepted Solution

by:
CoccoBill earned 250 total points
ID: 24430966
You need to set up a hierarchy something like this using the advanced ACL editor:

- Root level: traverse, list and read for domain users (so that new folders cannot be created)
- Target level aka the read-only folders: traverse, list and read for domain users, apply to this folder only
- Subdirectories: uncheck include inherited permissions, manually set permissions as needed
0

Featured Post

How does your email signature look on mobiles?

Do your employees use mobile devices to reply to emails? With mobile becoming increasingly important to the business world, it is in your best interest to make sure that your email signature looks great across all types of devices.

Join & Write a Comment

Many of us in IT utilize a combination of roaming profiles and folder redirection to ensure user information carries over from one workstation to another; in my environment, it was to enable virtualization without needing a separate desktop for each…
ADCs have gained traction within the last decade, largely due to increased demand for legacy load balancing appliances to handle more advanced application delivery requirements and improve application performance.
Internet Business Fax to Email Made Easy - With eFax Corporate (http://www.enterprise.efax.com), you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, fr…
Polish reports in Access so they look terrific. Take yourself to another level. Equations, Back Color, Alternate Back Color. Write easy VBA Code. Tighten space to use less pages. Launch report from a menu, considering criteria only when it is filled…

757 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

21 Experts available now in Live!

Get 1:1 Help Now