Solved

Creating permanent top level folders in a windows file sharing evironment

Posted on 2009-05-19
1
226 Views
Last Modified: 2013-12-04
Anyone have an idea for how to lock in a top level heirarchy in windows server 2003 (running active directory)? I have a share-point set up with several top level folders that have various sets of permissions. Recently I've had a request to lock down the top level heirarchy so that no one can move, rename, or delete top level folders (or add new ones). So even if "Bob" from the "Accounting" department has full write access to the items within the top level Accounting folder, he can not move, delete, or rename the folder itself.

I've experimented a little with the special permissions but haven't yet found a working scheme and easy way of implementing. Seems like it might require clever uses of the parent-child propagation option and advanced permissions management...
0
Comment
Question by:steiner470
1 Comment
 
LVL 19

Accepted Solution

by:
CoccoBill earned 250 total points
ID: 24430966
You need to set up a hierarchy something like this using the advanced ACL editor:

- Root level: traverse, list and read for domain users (so that new folders cannot be created)
- Target level aka the read-only folders: traverse, list and read for domain users, apply to this folder only
- Subdirectories: uncheck include inherited permissions, manually set permissions as needed
0

Featured Post

Efficient way to get backups off site to Azure

This user guide provides instructions on how to deploy and configure both a StoneFly Scale Out NAS Enterprise Cloud Drive virtual machine and Veeam Cloud Connect in the Microsoft Azure Cloud.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This is a guide to the following problem (not exclusive but here) on Windows: Users need our support and we supporters often use global administrative accounts to do this. Using these accounts safely is a real challenge. Any admin who takes se…
Container Orchestration platforms empower organizations to scale their apps at an exceptional rate. This is the reason numerous innovation-driven companies are moving apps to an appropriated datacenter wide platform that empowers them to scale at a …
This video shows how to remove a single email address from the Outlook 2010 Auto Suggestion memory. NOTE: For Outlook 2016 and 2013 perform the exact same steps. Open a new email: Click the New email button in Outlook. Start typing the address: …
This is a video describing the growing solar energy use in Utah. This is a topic that greatly interests me and so I decided to produce a video about it.

911 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

20 Experts available now in Live!

Get 1:1 Help Now